How can I check the configuration of firewall is correct or is working
Dear all professional,
I am new to PIX and I have to configure it. Now I have the following questions, please spend time to answer me.
1. After I finish configuring the PIX, how can I check it whether it works.
2. What I need to pay attention?
3. In the configuration file, the following command:
access-list 100 permit tcp any host XX.XX.XX.XX eq YY,
XX.XX.XX.XX is the ip of host while yy is port number.
I have 3 hosts connect to PIX, they are
EMAIL server(mtp) port number:25
MYSQL Database port number:3306
XML Database port number : unknown.
Could you please tell me how I can determine the port number.
4. Is anyone would like to give me a hint in assisting me finish the configuration of PIX if you are free. If yes, please email me, and I will send him/her the diagram. So, I will appreciate it very much.
Thank you for your attention and I look forward to hear from you soon.
Re: How can I check the configuration of firewall is correct or
If its a new PIX and still under warranty, it wouldnt hurt to get a TAC engineer to double-check your config and see if anything needs tweaking. After warranty, youll probably want to buy a support contract anyway because they are always solidifying the code and adding features.
The best way to see what your PIX is doing is to look into the debugging log files. It tells you whats being built and torn-down. Allowed and blocked. Youll also see the denies for your XML database application and you can look at the port number(s) right there so youll know what to open up.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...