pix 515 connect from DMZ to INSIDE on tcp 1521

Jun 04, 2006 0 Replies

Hallo All!



i have pix 515E, ver 7.0(4). I try connect to oracle ( tcp 1521) from DMZ to INSIDE. I don't know why it dont work. Its very especial becouse sometimes it work when i try connect to oracle from Toad program, and another protocol like ftp, www works. Please help me! I don't uderstand logic of pix.



My configuration:



interface Ethernet1 nameif inside security-level 100 ip address 192.168.1.1 255.255.0.0 ! interface Ethernet2 nameif dmz security-level 50 ip address 10.0.0.1 255.255.255.0 ... access-list dmz extended permit tcp host 10.0.0.10 host 10.0.0.250 eq sqlnet ... static (inside,dmz) tcp 10.0.0.250 sqlnet 192.168.1.250 sqlnet netmask



255.255.255.255 ... access-group dmz in interface dmz ... class-map inspection_default match default-inspection-traffic ! ! policy-map global_policy class inspection_default inspect sqlnet ! service-policy global_policy global ...

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required