Cisco PIX 520 - PIX Firewall 520 Online Help Manual page 134

Hosts/Networks
On the Hosts/Networks tab, you can view, edit, add to, or delete from the list of hosts and networks defined for
the selected interface. The PIX Device Manager requires that you define any host or network that you intend to
use in access rules and translation rules. These hosts or networks are organized below the interface from which
they are reachable. Access rules reference these hosts or networks in the source and destination conditions of a
rule, while translation rules reference them in the original address condition of a rule. When defining either type
of rule, you can reference a host or network by clicking the Browse button in the appropriate add or edit rule
dialog box. Additionally, you can reference the host or network by name if a name is defined for that host or
network. We recommend that you name all hosts and networks.
In addition to defining the basic information for these hosts or networks, you can define route settings and
Network Address Translation (NAT) rules for any host or network. You can also configure route settings in the
Routing>Static Route
These different configuration options accomplish the same results. The Hosts/Networks tab provides another
view to modify these settings on a per host/network basis.
The following sections are included in this Help topic:
Important Notes
Field Descriptions
Deleting a Host or Network
Important Notes
Consider the following information before defining the hosts and networks associated with the selected interface:
You should define a host or network under an interface when it is connected either directly to that interface
or indirectly through one or more gateways. PDM assumes a host or network can connect to only one PIX
Firewall interface. If, for some reason, you have a host or network that is reachable by multiple interfaces
in the PIX Firewall unit, you must create an instance of that host or network for each such interface.
If you attempt to define an access or translation rule using a host or network not previously defined on the
Hosts/Networks tab, you are presented with a shortcut to access the add or edit settings provided by this
tab.
Field Descriptions
The Hosts/Networks tab displays the following fields:
Interface—Displays a list of hosts and networks defined for an interface. You can select any enabled
interface previously defined on the
panel on the System Properties
System Properties
tab and translation rules on the
tab.
Translation Rules tab.