Advertisement

05.22.2008 at 01:21PM PDT, ID: 23425792
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
9.3

Block all internet access for specific computers Cisco PIX515e

Asked by spyder357 in Cisco PIX Firewall, Networking Hardware Firewalls, Enterprise Firewalls

I am trying to block all internet access on one specific computer and have the following acl's in place however the client can still access the internet.  I've got all tcp,ip,udp traffic blocked on both inside and outside interfaces  yet its still not working.

I'm guessing that it has something to do with the permit rules (I think those are needed cause the pix automatically creates an implicit deny rule when the first rule is created on an interface).

Any ideas?  Thanks.

access-list inside_access_out; 4 elements
access-list inside_access_out line 1 extended deny ip host 10.10.21.112 any (hit
cnt=0) 0x22c551a5
access-list inside_access_out line 2 extended deny udp host 10.10.21.112 any (hi
tcnt=0) 0x36075c45
access-list inside_access_out line 3 extended deny tcp host 10.10.21.112 any (hi
tcnt=0) 0xae84ecba
access-list inside_access_out line 4 extended permit tcp any any (hitcnt=955) 0x
5e231c28
access-list outside_access_out; 4 elements
access-list outside_access_out line 1 extended deny udp host 10.10.21.112 any lo
g emergencies interval 300 (hitcnt=0) 0xe05b4f66
access-list outside_access_out line 2 extended deny ip host 10.10.21.112 any log
 emergencies interval 300 (hitcnt=0) 0xaa84e06c
access-list outside_access_out line 3 extended deny tcp host 10.10.21.112 any lo
g emergencies interval 300 (hitcnt=0) 0x06cd1220
access-list outside_access_out line 4 extended permit ip any any (hitcnt=6523) 0
x3bdfb084

These were created in the ADSM as outgoing rules on the inside/outside interface.Start Free Trial
 
Keywords: Block all internet access for specific c…
Title
1 Configuration for multiple VPNs in Pix …
2 PIX515 Failover Reset
3 Resetting PIX Failover
4 PIX515 questions
5 PIX 515E not allowing UDP
6 Problems with CISCO PIX 506E Confi…
 
Loading Advertisement...
 
[+][-]05.22.2008 at 01:35PM PDT, ID: 21627325

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 01:37PM PDT, ID: 21627355

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 01:43PM PDT, ID: 21627409

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 01:43PM PDT, ID: 21627412

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 01:46PM PDT, ID: 21627443

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Cisco PIX Firewall, Networking Hardware Firewalls, Enterprise Firewalls
Sign Up Now!
Solution Provided By: nodisco
Participating Experts: 1
Solution Grade: A
 
 
[+][-]05.22.2008 at 01:48PM PDT, ID: 21627468

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 01:50PM PDT, ID: 21627485

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 02:05PM PDT, ID: 21627646

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.22.2008 at 02:08PM PDT, ID: 21627670

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628