Re: PIX 515E Question



* irvkatz@xxxxxxxxx wrote:
> We have a couple of users that VPN into our network thru the Cisco VPN
> software via the PIX. We want them to access only certain machines...
> is there a way to do this with the PIX or do I need a separate device
> to reign in those users?

no sysopt permit-ipsec
static (inside,outside) tcp <server> <port> <server> <port>
access-list from_outside permit tcp <pool> <mask> host <server> eq <port>
....
access-group from_outside in interface outside

Have fun.
.



Relevant Pages

  • Re: Unable To Print While Connected Via VPN
    ... this is something that you would have to configure on the PIX and would ... >> is using the Cisco VPN Client to initiate the connection the option I ... >>>> Network" to avoid this, but it is considered a security risk to do so. ...
    (microsoft.public.win2000.networking)
  • PIX 515E Question
    ... We have a couple of users that VPN into our network thru the Cisco VPN ... software via the PIX. ... is there a way to do this with the PIX or do I need a separate device ...
    (comp.dcom.sys.cisco)
  • RE: Cisco VPN Client one way traffic
    ... I understand that you launch the Cisco VPN ... this is a known issue of the Cisco VPN client behind ... Have the network administrator of the VPN server (PIX) verify that the ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 Std SP-1 and Cisco VPN Client
    ... I understand that you launch the Cisco VPN ... client on a workstation behind RRAS and connect to a Cisco VPN device ... this is a known issue of the Cisco VPN client behind ... Have the network administrator of the VPN server (PIX) verify that the ...
    (microsoft.public.windows.server.sbs)
  • Raptor Mobile to PIX VPN?
    ... PIX Config ... and my shared key matches perfect; ... Remember - VPN configuration on the PIX works if I use the Cisco VPN ...
    (comp.security.firewalls)