Global Vs. External port

[tmhicks]

When setting up an outbound policy. What is the difference between a global port and an external port? How do they work with one another?

I'd appreciate any feedback, I'm obviously new with PIX.

 

[yizhar]

HI.

What exactly do you want to do?
What PIX version?
In newer versions of PIX, it is recommended to use access-list commands instead of the obsolute outbound and apply commands.

Read the PIX manuals for your version:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[tmhicks]

PIX version 4.4 Can you set up the access list commands with the PFM? Do you recommend not setting any outbound and inbound commands>

Thanks

 

[berford]

tmhicks,

Global vs. External is a sort of documentation bug. "Global" refers to the global command which is used for building translations and address pools. An external port is one with a lower security level (outside relative to inside).

If you are using v4.4 PIX OS you cannot use PDM (PIX Device Manager). PFM (PIX Firewall Manager) will not help you configure the inbound / outbound commands.

I would suggest that you probably would be best off upgrading to v6.x and PDM. Check you hardware first (515, 520, 525,...). You need at least 16 MB flash and 64 (or 128 depending on model) MB of DRAM.

Liberty for All,

Brian