Link to home
Start Free TrialLog in
Avatar of dissolved
dissolved

asked on

pix questions

I have a pix 501. I noticed that not much configuration was needed to put it in place. Are all PIXs like this? Or do some of the other ones require more configuration?  what can I do to further configure this...as far as rules are concerned, inspection etc..
thanks
ASKER CERTIFIED SOLUTION
Avatar of JFrederick29
JFrederick29
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dissolved
dissolved

ASKER

Thanks. So basically, I wont do much more configuration to my PIX, than what I've already done?  (static routes, defining inside/outside interface etc..)
The more advanced PIXs are more like routers it seems.

Are PIX's easier to configure than routers?

Thanks for the heads up on the Pix 7.0. 23 pages of new features? Wow. Guess they dont follow K.I.S.S. philosophy
The more advanced PIXs are no more like a router than yours is. They behave the same way, just have more memory to run more advanced features like VLANs and OSPF and multiple interfaces (up to 100 to be exact) for multiple DMZs.

I personally think that the PIX is easier than a router. No wildcard masks, everything uses subnet masks--even acls.
I like the quick look at performance graphs on the home page of the GUI.

Just remember that it is NOT a router and does not behave anything like a router.

I guess the market forces drives the feature set, not the security people...I can't tell you how many times I've had to tell someone that the PIX simply will not do what they want it to, no matter how big their hammer. I always hear "but my Linksys|D-link|Wal-Mart special would do that. You mean a $50 box is more capable than a $5000 box?" - D'OH! they just don't get it..
I'm trying my best to get hold of the PIX 7.0 code to see what it really does...Volunteered to beta test.. waiting patiently...



Thanks man. Let us know if you get a hold of the 7.0 and what you think about it.
Thanks!