Cisco PIX 520 - PIX Firewall 520 Online Help Manual page 138

Translation Rules>Address Translation Rule
The Translation Rule Properties dialog box lets you add, edit, and paste translation rules for your PIX Firewall,
which are viewed in the main table of the Translation Rules tab. Depending upon which command you selected
in the Translation Rules menu, the title for this dialog box will appear as Add Address Translation Rule, Edit
Address Translation Rule, or Paste Address Translation Rule.
The following sections are included in this Help topic:
Field Descriptions
Adding Address Translation Rules
Example
Resetting to Last Applied Settings
Printing
Field Descriptions
The Add, Edit and Paste Address Translation Rule dialog boxes display the following fields:
Original Host/Network
Interface—Selects the PIX Firewall network interface on which the original host or network resides.
IP address—Specifies the IP address of the host or network to which you would like to apply a rule.
Mask—Select the network mask (netmask) for the address.
Browse... —Lets you select the correct IP address and mask from the
predefined host or network.
Translate address on less secured interface—Selects the PIX Firewall interface to which you want
to provide access. For example, if you are configuring a translation of an inside address, you would
select the outside interface, because that is where the translation occurs.
Static—Specifies that the address translation is a static, one-to-one translation of an IP address from
a private (non-valid) IP address to a global (valid) IP address. Static or Dynamic can be selected, not
both.
IP address—The global IP address on the lower security level interface you are accessing.
Advanced—Lets you configure the Maximum Connections, Embryonic Limit and Randomize
Sequence Number.
Maximum Connections—The maximum number of connections that are allowed to connect
to the statically translated IP Address. Valid options are 0 through 65,535. If this value is set to
Hosts/Networks tree from a