Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Determine Client infected using PIX??

Caution: While using NAT with a limited number of IP addresses in the translation pool, the translations may not time out if the global address continues to receive traffic. This may happen even if this traffic is blocked by an access list. For more details, refer to Cisco Bug ID CSCec47609.

IOS can use NetFlow to determine which host is generating this ICMP traffic thus the infected machine. How can I do this with PIX? will upgrading the IOS fix this although I still need to determine which machine is generating the traffic. I used the access lists but that prventing network browsing across the vpn tunnel.

1 REPLY
Silver

Re: Determine Client infected using PIX??

I'm not sure I understood your question correctly. The workaround for the PIX is included in the release notes itself. Dynamic PAT does not suffer from this limitation and the problem can be overcome by specifying one address for PAT in addition to the existing dynamic NAT pool.

83
Views
0
Helpful
1
Replies
CreatePlease to create content