ACL to Permit Access to Port 8090

wilson-liao · ‎10-30-2008

Pix 515E 6.3(5)

I need to permit my users access to an external website that uses port 8090.

Would this be correct?

access-list permit tcp 192.168.1.0 255.255.255.0 any eq 8090

Would I also need:

Fixup protocol http 8090

Thanks.

guibarati · ‎10-30-2008

If you put only the access-list it will work.

If you want the PIX to verify traffic of port 8090 in http layer 7 protocol you need fixup.

You must see if there is already a NAT from inside going outside and it's not using an access list with port on it. If so you need to add the same line of access list in the NAT ACL

wilson-liao · ‎10-30-2008

Thanks quibarati. I forgot about NAT. It works now.

guibarati · ‎10-30-2008

Rate please.