the pix firewall supports connections using xdmcp (x display manager control protocol) using the established command. this feature uses an xwindows tcp back connection fixup, which negotiates an xwindows session and creates an embryonic connection at destination port 6000. xdmcp handling is enabled by default, which is the same as other udp fixups.