MAC address filtering on the PIX outside interface

Unanswered Question
Jon Marshall Thu, 10/02/2008 - 11:46
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Not sure how this would work. Mac addresses are only relevant on the local LAN so the pix firewall would never see the source mac-address of the company laptops by the time the traffic gets to the pix.


If you are using a VPN on the laptops then yes you would see the mac-address but then with a VPN you could restrict it to only company laptops anyway.


Have i misunderstood what you are trying to do ?


Jon

Jon Marshall Thu, 10/02/2008 - 13:37
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Jay


Just for info - if the application is web based you can use your firewall to authenticate the users before giving them access.


Jon

Actions

This Discussion