I know this is late, but it might still be relevant.
There is extensive PIX info on the cisco web site. You might need to
register as a user and login.
There are some applications that won't work with PAT. X may be one of them.
It has to do with who is really the server / client in the X world.
What version of PIX are you running (show config - first line in response)?
The engineer from your vendor should have been able to make this work, or
explain why it wouldn't. The pix logging can be a very useful debugging
tool (<surprise>"host X is trying to open WHAT port?"</surprise>). I found
that the vendor was wrong about a particular protocol that way (about 5
minutes before another engineer found the trouble ticket explaining the
mistake on the vendor web site<grin>).
Please feel free to ask more questions: cc: me directly if you need a
faster response, I don't read my firewalls folder everyday.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Saturday, October 16, 1999 12:21 PM
To: Dan Simoes
Cc: firewalls
Subject: Re: urgent - need help with pix config
On Fri, 15 Oct 1999, Dan Simoes wrote:
> I posted the "pix vs checkpoint" request for info.
> Gee, guess which one I chose?
> (summary forthcoming)
> [...]
> I have to get some sleep now but will be up at 5am EST to continue this
> as our developers will be in at 9am, expecting X and NFS to work.
>
> I would greatly appreciate any replies, searches of deja.com and Cisco's
> web site have been fruitless.
> (pix support on their site seems to be nonexistent - is there a certain
> URL anyone can point me to?)
I might be too late (it's 10.20am here already), but can you use ssh to
do X forwarding? That doesn't help you for NFS though...for that, I would
think you would need some conduits. (I'm fairly new to the PIX stuff, so
perhaps someone else on this list can tell exactly how to set those up?)
-Jon
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
