[nsp] PIX 506e Question

Beprojects.com info at beprojects.com
Fri Mar 12 17:20:58 EST 2004


If you access it by IP, no.  If you access it via a dns name, then you can 
use the alias command to alter the dns replies.


On 2004-03-12 at 16:13:40 [-0600], J A Pine wrote:
> We are in the process of replacing our Netscreen firewall with a Cisco
> PIX 506e Firewall.  We have several stored procedures that access our
> inside web & ftp servers through our external IP's that are mapped
> internally.  With the Netscreen firewall we could connect from inside
> using our external IP's through the same interface.
>  
> The problem with the Cisco PIX 506e firewall is that I noticed you
> cannot send a packet our an interface and receive it on the same
> interface, thus not allowing us to connect to internal servers using our
> outside IP's.  Is there a workaround for this, or a certain
> configuration used to allow the interface to send & receive a packet on
> the same interface?  Please advise, as we do not want to have to rewrite
> several hundred stored procedures.  Thanks in advance!
>  
> J A Pine
> Network/Telecommunications Technician
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list