Cisco PIX 520 - PIX Firewall 520 Online Help Manual page 90

TCP—Lets you select the TCP service/protocol.
Authentication Service—Lets you specify the TCP service that the PIX Firewall will use to
authenticate a user.
Select Application—Lets you select a TCP protocol, such as ftp, http, or telnet from the
Select Application list.
AAA Server Group—Lets you specify the server group on which to run the selected AAA
service.
Group Tag—Lets you select a server group from the Group Tag list.
The authorize, do not authorize, account and do not account action rule types display the
following:
TCP—Lets you select the TCP service/protocol.
Application Port—Lets you specify the application port by either typing this information in
the Application Port box or selecting it from the service list. Click on the options button
(denoted by three dots) to select the application port.
UDP—Lets you select the UDP service/protocol.
Application Port—Lets you specify the application port by either entering it or selecting it
from a list of application ports. Click on the options button (denoted by three dots) to select
the application port.
ICMP—Lets you select the ICMP service.
ICMP Type—Lets you specify the ICMP message type by either typing this information in
the ICMP Type box or selecting it from the service list. Click on the options button (denoted
by three dots) to select the ICMP message type.
IP—Lets you select the IP service.
IP Protocol—Lets you specify the IP protocol type by either typing this information in the IP
protocol box or selecting it from the Protocols list. Click the options button (denoted by three
dots) to select the IP protocol type.
AAA Server Group
service.
Group Tag—Lets you select a server group from the Group Tag list.
The ActiveX filter option area displays the following:
Filter Java ActiveX on the following port—Lets you enter a port number on which to filter
ActiveX.
The Java Filtering Option area displays the following:
Java Filtering Option
Filter Java applet on following port(s)—Allows you enter a range of port numbers on
which to filter Java.
The URL Filtering Option displays the following:
Filter URLs on the following port—Lets you indicate whether to allow outbound http
connections to pass through your PIX Firewall without being filtered when your
Websense server is down. Click either Yes or No.
—
Lets you specify the server group on which to run the selected AAA