Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 329
  • Last Modified:

CISCO PIX 501 - Web Traffic Down - HELP!!

I have a cisco pix 501 firewall.  I am embarrassed to say that I use the PDM.  While using the PDM I deleted a dynamic rule at the bottom of the translation page.  Now the network machines cannot get to the internet.  I am still able to use the PDM remotely and the mail server is still replicating and ftp and www are still up..... HELP!!

Thanks,

Reade
0
Madmuda1
Asked:
Madmuda1
  • 3
  • 2
1 Solution
 
Madmuda1Author Commented:
Nevermind, I'm back up.  But while I have this question open, does anyone know why I am unable to delete some rules?  I have read that when you delete translation rules from the PDM, it doesn't delete them all the way.  I believe the only way to fully delete them is through the CLI, what would I put in the CLI to delete them???  Thanks
0
 
Joseph HornseyPresident and JanitorCommented:
Madmuda1,

First of all, the PDM is a nice tool for configuring your PIX 501.  There are, however, some limitations and Cisco has always been very biased againsted GUI tools.  They really want you to use the CLI (for example, when I was teaching the CCNA class, we would demonstrate the web interfaces for the routers, switches, etc. by pulling them up and then saying "See this interface?  It's very, very cool.  Don't ever use it.")

I can give you the syntax of the command you need, but I'll need some more info from you.  What, sepcifically, are you referring to when you say "rules" or "dynamic rules"?

In general, to get rid of a configuration command in a Cisco device, you simply type "no" followed by the configuration command.

For exampe, to turn on the PDM, you need to enable HTTP.  The command for this is:

http server enable

If you wanted to disable it, you'd type:

no http server enable

Hope that helps!

<-=+=->
0
 
rsivanandanCommented:
A rule if it is referenced by a nat statement, you won't be able to delete it.

Cheers,
Rajesh
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Madmuda1Author Commented:
Thanks for your responses.

As a new user who, for now, is forced to use the PDM,  It is a good idea to do the following:

Go to:  Options->Preferences

Check the box to enable "Preview commands before sending to the firewall"

-----

This enabled me to see what commands were being sent.  Together with the info from SplenterCell5894, I was able to see that I just needed to put a "No" before the commands I wanted to disable.

Thanks so much!!
0
 
Madmuda1Author Commented:
I might also include, to clear things up, that after altering a translation rule or any other rule in the PDM, I would hit save.  Then a screen pops up that tells me the commands that are going to be sent.  I copy and paste that info to a .txt file and close that window.  Next I go to the CLI and paste the lines I want to change, but I put a No in front of them.  "I think I should be embarrassed about this!"

Thanks for your help!
0
 
Joseph HornseyPresident and JanitorCommented:
Don't be embarassed.  Do you know how much time I've spent looking up commands on Cisco (and other web sites)?  And I've been doing this stuff for years!

Another thing you'll want to do is go to the CLI, do a "show run" and then cut and paste that into a text file.  Save the text file somewhere where you can reference it.  This has to major benefits for you:

1. You'll have a backup of your config (if you ever have to restore the firewall, you can just cut & paste it into the CLI)
2. You'll have a reference of how you've set things up.

I often have to refer back to another device's config when I'm configuring a new device because I can't remember how I did something in the past.

<-=+=->

P.S. - Thanks for the generous grade on my answer!
0

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now