How to configure a Cisco 2600 Router as a Pix Firewall

I let my Cisco certification expire 7 years ago because I had not worked with anything Cisco since I was in school.
During that schooling I was offered a certain Cisco security class which the instructor claimed would show how to configure a 2600 router as a Pix Firewall.  I skipped that class, and cannot seem to find anything related on the web.  
Is it possible to configure this way & if so is there simply a configuration file that I can upload to do it?
LVL 10
Who is Participating?
You can use access-lists and NATs to approximate some of the behavior of a PIX firewall, but the process is tedious and not intuitive at all. With the price of a base ASA 5505 at $350.00 USD (for a 10-user Base version) it's not really worth it.

However, if you want to try it, here are a few links (no, there isn't a basic config you can just put on a router):

Configuration Examples:

You will not be able to get a router to act exactly like a firewall. He was probably talking about CBAC, which is the IOS Firewall. Here's a configuration example:

Basically you have an ACL from the outside in, which blocks most things. You then use CBAC with "ip inspect" commands to look at the traffic going out and open up temporary holes in the ACL to allow the traffic back in from outside.
jasfoutAuthor Commented:
Thank you for the quick response!
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

You are looking for the Cisco IOS firewall feature set. Here is a link that goes in to the details of IOS firewall. 
Basically you need an IOS image that supports the IOS firewall feature set. You then can configure ACLs and inspection rules as you would a normal firewall. You also have the option of IDS/IPS functionality on some models.
 If you have a newer version of IOS on your 2600 that does support IOS firewall the best way to go about setting it up would be to use the cisco GUI (called SDM).
Hope this helps.
quick on the gun to accept an answer huh?
OH well :)
I thought the same thing, lol. Didn't even get the assist.
jasfoutAuthor Commented:
My apologies...I didnt realize Cisco was such a hot topic here.
When I accepted, there was only one comment, and it confirmed my suspicions.
You both provided valuable information and I may use it should I decide to configure that way.  For that I can only give you my thanks now....7 & 9 minutes quicker would have made the assist points for sure though.
I will try not to be so quick on the gun in the future

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.