Oscar,
try using
nat (interface) 0 ....
command. It disables NAT and requires to have public addresses for hosts
behind firewall. Refer to 'PIX Configuration Guide' for details (you
didn't write what version of sw you had... the most current is 5.1(2))
cheers
Arek Majer
______________________________________________________________________
| Arkadiusz Majer /\/\ |
| TP Internet, WAN Administrator /\\ //\ |
| office: +48 22 8509050 / / \/ \ \ |
| fax: +48 22 8509051 \ \ /\ / / |
| mobile (in case of national emergency): +48 501 393891 \// \\/ |
|___________________________________________________________\/\/_____|
>Date: Tue, 25 Jul 2000 20:16:24 -0500
>From: Oscar Rau <[EMAIL PROTECTED]>
>Subject: PIX and NAT
>
>We are implementing a DMZ which will be using public IP addresses. The
>DMZ systems interfacing the PIX interface will have a public IP
>addresses and not a private IP addresses. In this case, can GLOBAL/NAT.
>statements be still used to add any valuable security to the DMZ
>systems? Is there any point in using NAT, because we do not have private
>IP addresses to the DMZ systems?
>
>Any thoughts/ideas for this solution appreciated.
>
>Thank you in advance.
>
>Oscar Rau
>[EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
