Some of the commands which are affected are shown below
•no
•show
•clear
Some examples areFor example, a single no access-list <access-list name> removes the following
commands in PIX Version 6.3:
access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.209 eq 37000
access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.68 eq 37000
access-list myaccesslist extended permit tcp host 10.175.28.98 host
10.180.210.68 eq 37000
But in PIX Security appliance Version 7.0, the preceding commands are removed by
using either the clear configure access-list <access-list name> command or by the following:
no access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.209 eq 37000
no access-list myaccesslist extended permit tcp host 10.175.28.97 host
10.180.210.68 eq 37000
no access-list myaccesslist extended permit tcp host 10.175.28.98 host
10.180.210.68 eq 37000
CHECKING PIX Version
pix# show running-config
Mode used to configure.
We have also discovered that most users uses the
ASDM mode to configure PIX instead of the CLI mode.
The ASDM mode contains a simple user interface, while
the CLI is more of a command line interface
Adaptive Security Device Manager (ASDM)uses.
- Rapid Configuration:
Features such as in-line and drag-and-drop policy editing, auto
complete, configuration wizards, appliance software upgrades, and
online help enable trouble-free initial configuration and policy change
without issuing complex commands or worrying about syntax errors.- Powerful Diagnostics:
Features such as Packet Tracer, log-policy correlation, packet capture,
regular expression tester, and embedded log reference reduce
administrative overhead and increase operational efficiency.- Real-Time Monitoring:
Features such as device, firewall, content security, and IPS
dashboards; real-time graphing; and tabulated metrics enable rapid
response to security incidents and trend analysis.- Management Flexibility:
A lightweight and secure design enables remote management of multiple
security appliances while supporting a wide variety of operating
systems, including Microsoft Windows XP, Windows Vista, Windows 2003
Server, and MacOS X.Command Line Interface (CLI)Right now we uses, the CLI mode to configure the PIX configuration.
The next objective is to understand the configuration of NAT and PAT in PIX.
1 comment:
keep up your good work! :)
Post a Comment