Cisco 515E - PIX Restricted Bundle Getting Started Manual page 37

Chapter 2 Scenario: DMZ Configuration
c.
In the Destination area:
Step 4
a.
In the Protocol and Service area, specify the type of traffic that you want to permit
Step 5
through the security appliance.
a.
b.
c.
78-17645-01
Alternatively, if the address of the source host or network is preconfigured,
choose the source IP address from the IP Address drop-down list.
Enter the netmask for the source IP address or select one from the Netmask
drop-down list.
In the IP address field, enter the public IP address of the destination host or
network, such as a web server. (In this scenario, the public IP address of the
DMZ web server is 209.165.200.226.)
From the Protocol drop-down list, choose tcp.
In the Source Port area, click the Service radio button, choose "=" (equal to)
from the Service drop-down list, and then choose Any from the next
drop-down list.
In the Destination Port area, click the Service radio button, choose "=" (equal
to) from the Service drop-down list, and then choose HTTP/WWW from the
next drop-down list.
Configuring the Security Appliance for a DMZ Deployment
PIX 515E Security Appliance Getting Started Guide
2-21