cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
653
Views
0
Helpful
1
Replies

Pix 501 Firewalling Web Server

vivekcisco
Level 1
Level 1

I have a PIX 501 behind a comcast business gateway with a static IP address.

Hooked up a web server on the internal LAN and trying to allow outside access to the web server.

Internal network is able to access the internet.

VPN access to the internal network is fine.

But from the internet if I try to connect to the Web Server on the internal network, the connection never succeeds. The IIS web server logs dont show any connection activity at all.

Looks like the traffic does not reach the web server. Looks like the PIX is blocking it.

I am using the configuration shown in the attachment.

Could someone give me any hints on where the problem could be.

I am able to ping the static ip address from the internet. Just the http traffic does not seem to reach the web server for some reason.

Any help would be very much appreciated.

-Viv

1 Reply 1

mrmozaffari
Level 1
Level 1

Hi

change the

access-list 100 permit tcp any interface outside eq www

to

access-list 100 permit tcp any [web server {valid & invalid} ip address ] eq www

Best Regards Bahman Mozaffari.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card