Are there any Cisco PIX gurus here??? I need information on how to enable Active Directory authentication from the outside through a PIX 501 v6.3. Can this be done without a RADIUS server? Also help on allowing NetBIOS to pass through the PIX.
1) AD authentication through a firewall is a nightmare. There are severall microsoft posts on how to do this (mostly through a ISA firewall). If it was my call I would use IPSEC connections (host to host) to tunnel the request through the firewall.
2) NETBIOS through pix:
PORT 135 (TCP or UDP) for Remote Procedure Call(RPC)Service
PORT 137 (UDP) for NetBIOS Name Service
PORT 138 (UDP) for NetBIOS datagram (Browsing)
PORT 139 (TCP) for NetBIOS session (NET USE)