×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Is the "nail" option compatible (or supported) with PIX Firewall version 7.0 with static translation?

Document

Wed, 07/22/2009 - 19:36
Jun 22nd, 2009
User Badges:
  • Gold, 750 points or more

Resolution

A PIX configured for  static NAT translation with the  " nail "  option  will  be inspecting  the incoming TCP session incorrectly.

The problem exists in release 7.1(2). The problem does not exist in 6.3(5).

To be compatible downgrade the version to 6.3.5.

Loading.

Actions

This Document

Related Content