Can you send us a partial config with the NAT and GLOBAL commands? I think you may have something backwards in there... Usually the inbound communications are seen as being from normal hosts, it's just the outbound communication that is hidden.
-Ben
-----Original Message-----
From: Jesper Wall [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 20, 2000 1:29 AM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: RE: PIX Question
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hmm.. Strange.. I have used PIX with IIS, and the IP:s in the IIS
logs where the original ones. No special config.
/Jesper
> -----Original Message-----
> From: Noonan, Wesley [mailto:[EMAIL PROTECTED]]
> Sent: den 19 september 2000 22:05
> To: '[EMAIL PROTECTED]'
> Subject: PIX Question
>
>
> Scenario:
>
> Internet
> |
> IIS----PIX
>
>
> IIS Web Server on DMZ. Customer wants to be able to parse the
> IIS logs to
> determine what the original source IP address accessing the
> website is, for
> things like billing. All that is showing in the IIS logs is
> the PIX DMZ
> address. Is there a way to configure the PIX to pass the
> originating source
> IP address through to the webserver, while using NAT? The
> customer doesn't
> want to expose their IIS boxes without using NAT if they can
> help it...
>
> One of the ideas being kicked around as well is to have the
> PIX syslog to an
> NT/W2K box that runs a vbScript to parse and associate the
> security logs
> against the IIS logs... but that is likely going to take a bit of
> development.
>
> Any other ideas are appreciated. TIA
>
> Wes Noonan, MCP+I/MCSE/MCT/CCNA/NNCSS
> Senior QA Rep
> (713) 918-2412
> BMC Software, Inc.
> [EMAIL PROTECTED]
> http://www.bmc.com
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2
iQA/AwUBOchoZnbJ0bwjUb5tEQKr7gCgqvLKYELfQGvpu6XJNPH3cdAT2Q8AoKiN
rGi02OCSgWjNmfD/Oa7TBbzM
=snW+
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
