XWindows across a PIX515

[p.gentry]

I have a need to allow an X-Windows application across a PIX 515. When the client attempts to connect the get an XDM error. I am not doing any NAT or PAT on the IP address, and the access-list in place allows for all the TCP ports.

[gfullage]

If this is an XDMCP connection, you need to look at the "established" command (http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/df.htm#1028903), particularly at the example section.

[pavlosd]

What if I need to make an XDMCP connection from an outside interface to an inside?

Will I still use the command:

established udp 0 6060 permitto tcp 6061 permitfrom tcp 1024-65535

[milan.kulik]

I'm using

established tcp 0 6000 permitto tcp 6000-6063 permitfrom tcp 1024-65535

But do I also have to permit tcp traffic to ports 6000-6063 from outside to inside in my ACL?

Thanks,

Milan