: Saved
:
PIX Version 8.0(3) 
!
hostname pixfirewall
enable password XXXXXXXXXXXXXXXX encrypted
names
!
interface Ethernet0
 nameif inside
 security-level 100
 ip address 192.168.2.221 255.255.255.0 
!
interface Ethernet1
 nameif outside
 security-level 0
 ip address 192.0.2.221 255.255.255.0 
!
interface Ethernet2
 shutdown
 no nameif
 no security-level
 no ip address
!
interface Ethernet3
 shutdown     
 no nameif
 no security-level
 no ip address
!
interface Ethernet4
 shutdown
 no nameif
 no security-level
 no ip address
!
passwd YYYYYYYYYYYYYYYY encrypted
ftp mode passive
object-group network net-1
 description single network object-group
 network-object 192.168.2.0 255.255.255.0
object-group network net-2
 description multiple network-object objects
 network-object 192.168.1.0 255.255.255.0
 network-object 192.168.2.0 255.255.255.0
 network-object 192.168.3.0 255.255.255.0
object-group network host-1
 network-object host 192.168.1.5
object-group network mixed-1
 description mix of objects network-objects host objects
 network-object host 192.168.1.5
 network-object 172.16.0.0 255.255.0.0
 network-object host 172.16.15.12
 network-object 10.0.0.0 255.0.0.0
object-group network host-2
 network-object host 172.16.15.1
 network-object host 172.16.15.2
object-group service tcp-1
 service-object tcp eq www 
object-group service mixed-service-1
 description mix of service tcp & udp objects
 service-object tcp eq https 
 service-object udp eq dnsix 
 service-object tcp eq domain 
 service-object udp eq ntp 
object-group service service-ranges
 service-object tcp gt 1024 
 service-object tcp range 1024 8080 
 service-object udp eq www 
 service-object udp eq nfs 
 service-object udp lt 8080 
 service-object udp gt 1024 
 service-object udp range www 101 
 service-object tcp lt 65535 
object-group icmp-object icmp-1
 icmp-object echo-reply
object-group icmp-object icmp-2
 description multiple icmp-objects
 icmp-object 1
 icmp-object redirect
 icmp-object router-advertisement
object-group icmp-object icmp-3
object-group protocol protocol-1
 protocol-object ip
 protocol-object igmp

object-group protocol proto-icmp
 protocol-object icmp
object-group protocol proto-icmp6
 protocol-object icmp6
object-group protocol proto-ip
 protocol-object ip
object-group protocol proto-ipsec
 protocol-object esp
object-group protocol proto-pptp
 protocol-object gre
object-group protocol proto-snp
 protocol-object snp
object-group protocol proto-tcp
 protocol-object tcp
object-group protocol proto-udp
 protocol-object udp

pager lines 24
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
icmp permit any echo outside
icmp permit any 111 outside
icmp permit any time-exceeded outside
icmp permit any echo-reply outside
icmp permit any unreachable outside
icmp permit any outside
icmp permit host 10.1.1.202 time-exceeded inside
icmp permit host 10.1.1.202 echo-reply inside
icmp permit host 10.1.1.202 unreachable inside
icmp permit any echo inside
icmp permit any time-exceeded inside
icmp permit any echo-reply inside
icmp permit any unreachable inside
icmp permit any inside
icmp permit 10.1.1.0 255.255.255.0 inside

no asdm history enable
arp timeout 14400
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet 192.168.2.0 255.255.255.0 inside
telnet timeout 5
ssh 192.168.2.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
username cisco password ZZZZZZZZZZZZZZZZ encrypted
!
!
prompt hostname context 
Cryptochecksum:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
: end
