| 9.4 |  | Connections |
| 9.4.2 |  | Statics and conduits |

| Most connections occur from an interface with a high security level to an interface with a low security level. While the PIX Security Appliance can be configured to block these connections, it allows them by default. There are times, however, when the administrator will want to allow connections from an interface with a lower security level to an interface with a higher security level. These connections are blocked by default by the PIX Security Appliance. In order to allow them, static and conduit commands, or static commands and ACLs, are used .

As was discussed earlier in this module, the static command creates a static mapping between an inside IP address and a global IP address. Using the static command enables administrators to set a permanent global IP address for a particular inside IP address. This creates an entrance for the specified interfaces with the lower security level into the specified interface with a higher security level.

After creating a static mapping between an inside IP address and a global IP address by using the static command, the connection from the outside interface to the inside interface is still blocked by the PIX Security Appliance Adaptive Security Algorithm (ASA). The conduit command is used to allow traffic to flow between interfaces . The conduit command creates the exceptions to the PIX Security Appliance ASA.

Please examine the Online Command Reference for further explanation of the conduit command and its syntax.

| Lab Activity e-Lab Activity: static and conduit Commands In this activity, the student will create a static mapping for an inside IP address and the companion conduit statement that will create the exception to allow traffic flow.