| 15.4 |  | Using PDM to Configure the PIX Security Appliance |
| 15.4.3 |  | Access Rules tab |

| The Access Rules tab combines the concepts of access control lists (ACLs), outbound lists, and conduits. The Access Rules tab describes how an entire subnet or specific network host interacts with another to permit or deny a specific service, protocol, or both. PDM does not support the use of ACLs, conduits, and outbounds together. Only one of the three can be used. ACLs are the preferred choice. The choice that is initially made is used by PDM. If more than one of these choices is in the PIX configuration, PDM will only be able to monitor.

The Access Rules tab also enables the administrator to define authentication, authorization, and accounting (AAA) rules, and filter rules for ActiveX and Java. The configuration edits performed on the Access Rules tab are captured by the PDM, but are not sent to the PIX Security Appliance until the Apply to PIX button is selected. This applies to all configuration performed with PDM, including those performed in the Translation Rules tab, the Hosts/Networks tab, and the System Properties tab. It is important to remember that it is necessary to click Apply to PIX to send the configuration edits to the PIX Security Appliance. Also, it is very important to save the configuration to Flash memory by choosing File > Write Configuration to Flash from the main menu or clicking the Save icon in the toolbar.