PIX and Netmeeting

j.joe · ‎06-03-2001

I've configured my PIX to allow H.323 traffic. After read the reference from Netmeeting, I understanded that I have to allow secondary dynamic TCP port traffic after H.323 port is connected so I used "Establish" command to do so. Then I found the netmeeting parnter can connect to my defined dynamic port ranges besides the basic secondary port.

How can I stop this potential security hole?

bstremp · ‎06-07-2001

What version of PIX are you using? I think there was a bug on that on older PIX code.

j.joe · ‎06-07-2001

Current my PIX is 5.2(3). Can I directly upgrade to 6.0 so that the prossible security hole can be stopped?

bstremp · ‎06-08-2001

I thought 5.2 had that fix. You might just need to have Cisco’s tac look at your configuration. It’s not a good idea to try to do a code jump like that. You always need to upgrade 5.2.x to 5.3.x then 6.0 etc so the upgrade parser can handle any command syntax changes. If not, you could loose important configuration lines. ( I would first go to 5.2(5) and test it from there. There’s usually no good reason to be on the very latest PIX code.