Solved

pix506e

Posted on 2003-10-29
3
241 Views
Last Modified: 2013-11-16
how to open ports in cisco pix 506e
0
Comment
Question by:nakka_sudhir
3 Comments
 
LVL 2

Accepted Solution

by:
Russky earned 50 total points
ID: 9641511
Hi Nakka,

Can only give you basic info given the amount I have to go on!

Pix 506, you will need 2 Access Lists - One for the External interface and one for the Internal Interface.

Unless you are running a webserver or other kind of service, the external access list should deny everything
The internal access list should only allow through the traffic you need, i.e. port 80 for Web Browsing, 442 for SSL Etc..

So, firstly you need to create your access lists:
***
access-list acl_out deny ip any any
access-list acl_int permit tcp host any any eq www
access-list acl_int permit udp host any any eq domain
***

Then you bind them to the required interface:
***
access-group acl_out in interface outside
access-group acl_int in interface inside
***

acl_out is bound to the outside interface and denys all incoming traffic
acl_int is bound to the inside interface and only allows traffic out on ports 80 and 53 - the basics needed for web browsing.

Provided the rest of the pix is set up correctly you will now be able to look at web pages.

Hope this helps,

Russky




0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question