fw#
fw#
fw# sh run
: Saved
:
PIX Version 6.3(3)
interface ethernet0 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password ************ encrypted
passwd ***************
hostname fw
domain-name ar.local
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list out_in permit icmp any any
access-list out_in permit tcp any host 24.187.192.210 eq 43389
access-list out_in permit tcp any host 24.187.192.210 eq 3389
access-list out_in permit tcp any host 24.187.192.210 eq telnet
access-list out_in permit tcp any host 24.187.192.210 eq www
access-list out_in permit tcp any host 24.187.192.210 eq ftp
access-list out_in permit tcp any host 24.187.192.210 eq pcanywhere-data
access-list out_in permit udp any host 24.187.192.210 eq pcanywhere-status
access-list out_in permit tcp any host 24.187.192.210 eq https
access-list out_in permit tcp any host 24.187.192.210 eq 1024
access-list out_in permit tcp any host 24.187.192.210 eq 9012
access-list out_in permit tcp any host 24.187.192.210 eq 6550
access-list out_in permit tcp any host 24.187.192.210 eq 5550
access-list out_in permit tcp any host 24.187.192.210 eq 4550
access-list out_in permit tcp any host 24.187.192.210 eq 3550
access-list out_in permit tcp any host 24.187.192.210 eq 5066
access-list out_in permit tcp any host 24.187.192.210 eq 5800
access-list out_in permit tcp any host 24.187.192.210 eq 5900
access-list vst permit ip 192.168.1.0 255.255.255.0 10.0.50.0 255.255.255.0
access-list vst permit ip 192.168.1.0 255.255.255.0 192.168.100.0 255.255.255.0
access-list in_out permit ip any host 72.246.120.69
access-list in_out permit ip any 199.81.0.0 255.255.0.0
access-list in_out permit ip any host 207.44.11.70
access-list in_out permit ip any 199.41.238.0 255.255.255.0
access-list in_out permit ip any 209.64.143.0 255.255.255.0
access-list in_out permit ip any host 208.101.21.146
access-list in_out permit ip any host 81.52.249.110
access-list in_out permit ip any host 81.52.249.105
access-list in_out permit ip any host 199.41.238.47
access-list in_out permit ip any host 141.155.145.125
access-list in_out permit ip any host 63.148.56.189
access-list in_out permit ip any host 63.148.56.188
access-list in_out permit ip any host 64.124.61.12
access-list in_out permit ip any host 209.144.152.129
access-list in_out permit ip any host 64.124.61.10
access-list in_out permit ip any host 153.2.224.55
access-list in_out permit ip any host 63.64.39.65
access-list in_out permit ip any host 66.254.95.154
access-list in_out permit ip any host 216.92.102.247
access-list in_out permit ip any 68.142.205.0 255.255.255.0
access-list in_out permit ip any 66.133.117.0 255.255.255.0
access-list in_out permit ip any host 66.133.117.13
access-list in_out permit ip any host 64.14.24.70
access-list in_out permit ip any host 75.126.12.36
access-list in_out permit ip any 63.64.39.0 255.255.255.0
access-list in_out permit ip any host 209.64.143.146
access-list in_out permit ip any 198.203.59.0 255.255.255.0
access-list in_out permit ip any host 72.53.194.34
access-list in_out permit ip any 66.77.23.0 255.255.255.0
access-list in_out permit ip any host 66.77.23.172
access-list in_out permit ip any host 216.247.205.113
access-list in_out permit ip any host 68.142.205.137
access-list in_out permit ip any host 66.163.161.45
access-list in_out permit ip any host 153.2.228.55
access-list in_out permit ip any host 153.2.224.50
access-list in_out permit ip any host 153.2.228.50
access-list in_out permit ip any host 209.152.166.207
access-list in_out permit ip any host 209.64.143.16
access-list in_out permit ip any host 198.203.59.197
access-list in_out permit ip any host 63.124.135.2
access-list in_out permit ip any host 207.178.207.154
access-list in_out permit ip any host 207.178.207.155
access-list in_out permit ip any host 209.152.166.219
access-list in_out permit ip host 192.168.1.192 any
access-list in_out permit ip host 192.168.1.215 any
access-list in_out permit ip host 192.168.1.216 any
access-list in_out permit ip host 192.168.1.217 any
access-list in_out permit ip host 192.168.1.218 any
access-list in_out permit ip host 192.168.1.219 any
access-list in_out permit ip host 192.168.1.220 any
access-list in_out permit ip host 192.168.1.221 any
access-list in_out permit ip host 192.168.1.222 any
access-list in_out permit ip host 192.168.1.223 any
access-list in_out permit ip host 192.168.1.224 any
access-list in_out permit ip host 192.168.1.225 any
access-list in_out permit ip host 192.168.1.226 any
access-list in_out permit ip host 192.168.1.227 any
access-list in_out permit ip host 192.168.1.228 any
access-list in_out permit ip host 192.168.1.229 any
access-list in_out permit ip host 192.168.1.230 any
access-list in_out permit ip host 192.168.1.231 any
access-list in_out permit ip host 192.168.1.232 any
access-list in_out permit ip host 192.168.1.233 any
access-list in_out permit ip host 192.168.1.234 any
access-list in_out permit ip host 192.168.1.235 any
access-list in_out permit ip host 192.168.1.236 any
access-list in_out permit ip host 192.168.1.237 any
access-list in_out permit ip host 192.168.1.238 any
access-list in_out permit ip host 192.168.1.239 any
access-list in_out permit ip host 192.168.1.240 any
access-list in_out permit ip host 192.168.1.241 any
access-list in_out permit ip host 192.168.1.242 any
access-list in_out permit ip host 192.168.1.243 any
access-list in_out permit ip host 192.168.1.244 any
access-list in_out permit ip host 192.168.1.245 any
access-list in_out deny tcp any any eq www
access-list in_out deny tcp any any eq https
access-list in_out permit ip any any
access-list auth_out_in deny tcp any any eq 43389
access-list auth_out_in deny tcp any any eq 9012
access-list auth_out_in deny tcp any any eq 6550
access-list auth_out_in deny tcp any any eq 5550
access-list auth_out_in deny tcp any any eq 4550
access-list auth_out_in deny tcp any any eq 3550
access-list auth_out_in deny tcp any any eq 5066
access-list auth_out_in deny tcp any any eq 5800
access-list auth_out_in deny tcp any any eq 5900
access-list auth_out_in permit ip any any
pager lines 24
logging buffered informational
mtu outside 1500
mtu inside 1500
ip address outside 24.187.192.210 255.255.255.248
ip address inside 192.168.1.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 10.0.50.1-10.0.50.254
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list vst
nat (inside) 1 192.168.1.0 255.255.255.0 0 0
static (inside,outside) tcp interface https 192.168.1.192 https netmask 255.255.255.255 0 0
static (inside,outside) tcp interface www 192.168.1.192 www netmask 255.255.255.255 0 0
static (inside,outside) tcp interface ftp 192.168.1.192 ftp netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 3389 192.168.1.192 3389 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 1024 192.168.1.211 1024 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface telnet 192.168.1.211 telnet netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 9012 192.168.1.223 9012 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 6550 192.168.1.223 6550 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 5550 192.168.1.223 5550 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 4550 192.168.1.223 4550 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 3550 192.168.1.223 3550 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 5066 192.168.1.223 5066 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 5800 192.168.1.223 5800 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 5900 192.168.1.223 5900 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 43389 192.168.1.236 3389 netmask 255.255.255.255 0 0
access-group out_in in interface outside
access-group in_out in interface inside
route outside 0.0.0.0 0.0.0.0 24.187.192.209 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
aaa authentication match auth_out_in outside LOCAL
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
sysopt ipsec pl-compatible
crypto ipsec transform-set vpnset esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set vpnset
crypto map vpnmap 10 ipsec-isakmp dynamic dynmap
crypto map vpnmap interface outside
isakmp enable outside
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup vpnuser address-pool vpnpool
vpngroup vpnuser split-tunnel vst
vpngroup vpnuser idle-time 1800
vpngroup vpnuser password ********
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 30
console timeout 0
username Dubirabi password ************** encrypted privilege 2
username armedical1 password ************** encrypted privilege 2
username armedical2 password ************** encrypted privilege 2
username avi1 password ************** encrypted privilege 2
username NewEra password ************** encrypted privilege 2
username newera password ************** encrypted privilege 2
username shlomoca password ************** encrypted privilege 2
username Rosa1111 password ************** encrypted privilege 2
terminal width 80
Cryptochecksum:806cd5f8113b662fa2814dd99fbd6872
: end
fw#