Sunday, December 21, 2008

Differences between PIX 6.3 and 7.2

I have discovered the differences in the PIX command between PIX version 6.3 and 7.2
Some of the commands which are affected are shown below

•no

•show

•clear

Some examples are

For example, a single no access-list <access-list name> removes the following

commands in PIX Version 6.3:

access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.209 eq 37000
access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.68 eq 37000
access-list myaccesslist extended permit tcp host 10.175.28.98 host
10.180.210.68 eq 37000

But in PIX Security appliance Version 7.0, the preceding commands are removed by

using either the clear configure access-list <access-list name> command or by the following:

no access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.209 eq 37000
no access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.68 eq 37000
no access-list myaccesslist extended permit tcp host 10.175.28.98 host
10.180.210.68 eq 37000


CHECKING PIX Version

pix# show running-config


Mode used to configure.

We have also discovered that most users uses the
ASDM mode to configure PIX instead of the CLI mode.

The ASDM mode contains a simple user interface, while
the CLI is more of a command line interface

Adaptive Security Device Manager (ASDM)uses.

  • Rapid Configuration:
    Features such as in-line and drag-and-drop policy editing, auto
    complete, configuration wizards, appliance software upgrades, and
    online help enable trouble-free initial configuration and policy change
    without issuing complex commands or worrying about syntax errors.
  • Powerful Diagnostics:
    Features such as Packet Tracer, log-policy correlation, packet capture,
    regular expression tester, and embedded log reference reduce
    administrative overhead and increase operational efficiency.
  • Real-Time Monitoring:
    Features such as device, firewall, content security, and IPS
    dashboards; real-time graphing; and tabulated metrics enable rapid
    response to security incidents and trend analysis.
  • Management Flexibility:
    A lightweight and secure design enables remote management of multiple
    security appliances while supporting a wide variety of operating
    systems, including Microsoft Windows XP, Windows Vista, Windows 2003
    Server, and MacOS X.
Command Line Interface (CLI)
Right now we uses, the CLI mode to configure the PIX configuration.

The next objective is to understand the configuration of NAT and PAT in PIX.

1 comment:

Wagio Chan said...

keep up your good work! :)