Mystery of the blocked users

[TimV]

I simply want to deny access to the internet to all, then allow access for certain users. When doing the original setup, I allowed a couple computers access, then decided to not use them and took them off the list. My license is for 10 users, which I thought meant any 10 active users can get through to the internet. I only have 10 users on my list, but 2 of them which were added last cannot get through the firewall:

Yvonne-Laptop and Dr_Privett_Main cannot get out.

The Pix appears to have locked onto the first 10 users to have hit the firewall and is now blocking any others I attempt to give access to.

Listed below is my current access-list... Does anyone have any thoughts on what I am doing wrong?

Thanks! Tim



Result of PIX command: "show access-list"

access-list inside_access_in permit ip host Debbie any
access-list inside_access_in permit ip host Yvonne-Laptop
access-list inside_access_in permit ip host Vet-Scans any
access-list inside_access_in permit ip host Paula any
access-list inside_access_in permit ip host Nancy any
access-list inside_access_in permit ip host Dr_Privett_Main any
access-list inside_access_in permit ip host Kerri any
access-list inside_access_in permit ip host Fitzcharles any
access-list inside_access_in permit ip host Privett any
access-list inside_access_in permit ip host Valenta any
access-list inside_access_in deny ip any any

 

[N0ktar]

I've encountered the same issue, seems this works somewhat like a router access-list, which makes you reenter all the access-list statements every time you make changes. Tftp server comes in handy.

 

[TimV]

Mystery Solved!

Cisco says that this version has a bug:

> Cisco PIX Firewall Version 6.1(1)
> Cisco PIX Device Manager Version 1.1(2)
> Compiled on Tue 11-Sep-01 07:45 by morlee


They send me an update via email, with instructions on how to load it. The working version is:

Cisco PIX Firewall Version 6.1(1)104
Cisco PIX Device Manager Version 1.1(2)
Compiled on Tue 18-Dec-01 11:04 by morlee

Now the PIX seems to be working fine.