Static PAT issue with PIX

Unanswered Question
Mar 16th, 2009
User Badges:

A client has asked me to configure PAT on their PIX to forward 3389, 80, 443, and lotusnotes ports to an internal IP. I have done this same configuration on other boxes approx 150 times with no issues but for some reason this one is killing me. Can anyone verify my config to make sure I'm not being dumb?

I can ping the internal IP of

I can ping the gateway IP of XXX.XXX.240.254

When I attempt to RDP or http from outside and I run a 'sh xlate' on the PIX I see the global PAT for each created and in-use.

When I RDP, http, etc. from a server inside to the address I have no issues.

Please see the attached config.

The only things I can come up with would be that the ISP is blocking these services for some reason or that there is a device inside of the PIX blocking them.

Thanks in advance!!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3.5 (2 ratings)
JORGE RODRIGUEZ Mon, 03/16/2009 - 17:20
User Badges:
  • Green, 3000 points or more

The config port forwarding and acl looks fine to me, either host has a firewall of its own blocking traffic or perhaps those wwww,443, lotusnotes tcp services are not running on the server, can you confirm this is not the case?

blakewebb Tue, 03/17/2009 - 01:45
User Badges:

Thanks...for the confirmation...ended up being the gateway on the server.


This Discussion