Cisco PIX configuration Question - very limited info. Sorry!!
I have been asked a quetsion about a Cisco PIX (I do not know what model it is) of which I have very very limited knowledge. The person asking me the question, is helping someone else!!. I apologise in advance for the lack of information here, but Im hoping someone that has expert PIX skills will be able to diagnose the potential problem, or ask me the question to ask down the chain to get this fixed. The question they asked me was:-
"cannot get NAT to work properly between the DMZ and other ports"
I know this is very skectchy, but because I am not a firewall or security guy Im not sure what I am looking for or what other questions I need to ask. I do however have a copy of the config, if any one can help, one would really appreciate it.
Re: Cisco PIX configuration Question - very limited info. Sorry!
I dont know what does mean "DMZ and other ports"
but there is some DMZ NAT strange configuration
global (dmz1) 1 10.30.30.100
nat (dmz1) 1 10.30.30.0 255.255.255.0 0 0
It means that host on DMZ1 are NATed to IP from same range
fe. host 10.30.30.10 is NATed to 10.30.30.100 even further host 10.30.30.100 is "NATed" to 10.30.30.100... It could be a problem... Why is it configured like this?? What is role of DMZ host, where should they access, from where should be those host accessible???
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...