Solved

How to access Cisco Pix Firewall

Posted on 2007-03-25
11
421 Views
Last Modified: 2010-04-17
I have a client who had a Cisco Pix installed, and the company that installed it split half way through the setup. We now need to modify the settings inside the firewall, but I cannot figure out how to get into it.

What is the default user / pass / port / address for this device? We have the admin credentials that were supposed to be used, and I am fairly sure it is sitting at 192.168.0.1 (gateway). I just can't figure out how to access it.

any thoughts?

PS. Since my company usually uses all linux based firewalls, this is the first Pix I have worked with. So, answering this like I am a Cisco noob is appropriate.
0
Comment
Question by:DrDamnit
  • 5
  • 3
  • 3
11 Comments
 
LVL 28

Expert Comment

by:batry_boy
ID: 18788167
Do you have the console cable for the PIX?  It's a flat blue rollover cable that has an RJ-45 on one end and either a DB9 serial connector on the other.  You can use HyperTerminal or some such other terminal emulation program to establish a console session to the PIX.  By default there is no console password you will need to get into it.

There is an "enable" mode password you will need to modify settings (like the root password on a Linux box).  By default, the enable mode password is blank.  Try typing "enable" at the command prompt...it will ask for a password, just hit <Enter>. If the prompt changes to

pix#

then you will be able to make modifications by going to a mode called "config" mode.  Type "config t" and your prompt should change to

pix(config)#

You will then be able to make changes to the configuration of the PIX.

There is a web GUI for the PIX called PDM that you can try to access using https://<inside_ip>.  If you think your inside IP address is 192.168.0.1, then try https://192.168.0.1 and see if you get a login prompt.  However, I would stick with the CLI right now if you're familiar with Linux and iptables or some such other firewall platform.

Post back with what you get since there are probably going to be other questions.  I didn't go too deep into this because I don't know how far you'll get into the firewall.  You may wind up having to perform a password recovery on it.  If none of the passwords you have work on the PIX, see the below link for password recovery procedures for the PIX:

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_password_recovery09186a008009478b.shtml
0
 
LVL 32

Author Comment

by:DrDamnit
ID: 18788175
Don't have the cable, and https://192.168.0.1 is a "Page cannot be displayed..."
0
 
LVL 32

Author Comment

by:DrDamnit
ID: 18788178
found the cable.... now I don't have a serial port on my laptop... :-(
0
 
LVL 32

Author Comment

by:DrDamnit
ID: 18788181
ok.... using fairy dust, a paper clip, 1/2 a banna peel, and a little luck.... I have the serial cable connected to the laptop.

What next? How do I access the CLI? Is there an app I need to download?
0
 
LVL 28

Expert Comment

by:batry_boy
ID: 18788243
Any terminal emulation software that will allow you to choose your serial port as the method of connection should work.  In Windows, HyperTerminal will work (although the scroll back buffer sucks), but it will get you where you need to go.

If you want something a little better, I use something called Tera Term Web (http://www.ayera.com/teraterm/).

When setting up your serial connection, choose the following settings:

9600 baud
8 data bits
1 stop bit
no parity bits
hardware or no flow control works fine

Then hit <Enter> a couple of times and you should see a "hostname>" prompt where hostname is the name of the PIX.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 32

Author Comment

by:DrDamnit
ID: 18788268
OK, now what is the default user / pass?
0
 
LVL 32

Author Comment

by:DrDamnit
ID: 18788271
failing that, I would like to get the password recovery link you just sent me, but it requires a user/ pass. :-(
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 18788343
For password recovery, here is the link without password;

http://www.cisco.com/warp/public/110/34.shtml

Now,

1. Have you tried to telnet to the box ?

2. Have you tried the ssh to the box ?

3. Have you tried http://<IPAddress> to the box (Watch, it is not https)

If all of the above failed; then proceeding from where you're now;

Batry_Boy has the info above on how to connect using console cable;

try the default password -> cisco

see if it works..

Cheers,
Rajesh
0
 
LVL 28

Expert Comment

by:batry_boy
ID: 18788646
Rajesh, I didn't think the PIX supported http, but only https...is this not right?
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 18788752
Oops yes, It doesn't support http, only https is allowed. Lot of routers and pix in mind :-)

Cheers,
Rajesh
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 19141844
thnx.

Cheers,
Rajesh
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now