Is there a way to use the SMTP-only restriction on an inbound conduit AND allow incoming traffic to TCP port 20022 (for SSH)? It seems that CipherTrust tech support will only connect via SSH but our policy is SMTP only to the mail server.
Thanks to all the gurus in advance!
You can allow any port you want in. If your support need SSH then you can configure the pix to allow it.
Chris.
I'm not quite sure what you are asking. Are you asking for the PIX to inspect the encrypted ssh stream passing through it, with a goal of having the PIX enforce certain SMTP rules. That is, to apply the smtp fixup to the encrypted ssh session ?
Have something to add? Share your thoughts — no account required.
Ask the community — no account required