How can I stop local host scanning port to outside network

[ltthanh]

Hello,

I have a PIX firewall 520 version 4.4 , an edge router 7505 IOS 12.0.(5). How can I stop local hosts scanning port to others hosts outside my network.

Please help me if you have any experience about this.

Ps: Can I apply stop scanning port between VLANs on Catalyst 6509, ISO 12.0.(5).

Your advice and guide is higly appeciated.

Thank you

[r-simpson]

On the PIX you could restrict the outbound services to be limited to what you are allowing (i.e. Telnet, ftp, http, smtp, etc.) You could also restrict just that user to specific services. You can be sure your network is protected from port scanning with your PIX in place.