PIX fixup is related to advance protocol handling. This helps certain protocol that have problems operating with the basic idea of the PIX's Adaptive Security Algorithm (i.e. Allow all outbound connections unless explicitly denied and deny all inbound connections unless explicitly allowed).
Essentially port communication that is negotiated at the application layer, can allow a "fixed up" protocol to dynamically bypass the ASA. This means that dynamically assigned ports used in FTP and Multimedia applications can work correctly through the PIX.
Fixup also knows the correct use of protocols, and can protect against known exploits or "badly behaving" hosts.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.