CCIE Security Practice Labs

Section 4.0: PIX Configuration (7 points)

4.1. Basic PIX Configuration (3 points)

1. Configure PIX bootstrap configuration.

2. Configure static translation for AAA server with the IP addresses shown in Figure 7-1. Configure ACL accordingly.

3. Configure RIP for R1 and R2 as per Section 2.3.

4. Configure a static default route on PIX to R2.

4.2. Advanced PIX Configuration (4 points)

1. Filter all Java applets and ActiveX controls that return to the AAA server from an outbound HTTP connection.

2. Configure filtering for all users except AAA server to prevent outbound users from accessing World Wide Web URLs using a WebSense filtering application server 175.1.5.23 on VLAN5 based on the company security policy. When the WebSense server is unavailable, let all outbound ...