traffic passed on PIX

vintan1801 · ‎11-25-2008

Hi,

Can someone tell me if i need to check the following traffic is being passed on the PIX?

Source: x.x.x.246

destination: 172.18.46.75

what is the command to figure out on PIX?

& also need to check for hits on the access-list for:-

access-list acl-test permit tcp host grp1 host zb-nat object-group tcp_ports

please advise with the appropriate commands to run on PIX.

Thanks in advance.

Vin

Jon Marshall · ‎11-25-2008

Vin

"sh conn" will show you all the current connections going through the firewall and you can look for specfic connections -

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s2_72.html#wp1179782

"sh access-list acl-test" should show you the hits per line.

Jon

vintan1801 · ‎11-25-2008

appreciate for your timely response.

But can't we use capture command on PIX from source to destination?

Jon Marshall · ‎11-25-2008

If you want to capture the actual traffic rather than just see if there is a connection then yes you could use the capture command to actually view the packets.

Jon