Isolate 1 server in pix515e dmz

[zacca]

Hi there,

I got 3 servers in pix515e dmz. Now for some reason I need to allow vendor to remote access 1 of my server in dmz via public internet.

Just wondering for pix's acl, can I isolate that particular server by
1. outgoing: only able to access itself, & public internet
2. incoming: only able to be accessed via specified public ip address

Thanks so much for your help!

 

[themut]

The link below is an excellent guideline:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml