TABLE OF CONTENTS This section covers how to configure the PIX and ASA s basic and advanced security features to meet your solution s needs. We discuss in detail how to securely access the PIX/ASA and define security levels, NAT, access rules, routing, failover, and other security features.
| Note | As a general rule, all command examples provided here are the same for both the PIX and the ASA. In most cases, the commands are based on the PIX/ASA 7. x OS. In cases where there are different commands for the PIX 6. x OS, we provide examples of both commands. |
There are several ways to access the PIX/ASA to configure, troubleshoot, or monitor its status, including console access,Telnet, SSH, PDM (PIX 6. x), and ASDM (PIX 7. x and ASA). In this section, we discuss the advantages and disadvantages of each access method as well as how to configure some of the more secure methods. We also discuss how to authenticate users and manage them via an external RADIUS or TACACS+ server.
Out of the box, the higher-end PIX chassis, including the PIX 515E and all ASA firewalls, must be initially set up via the console port. Whereas the lower end PIX (PIX 501 and PIX 506E) can also be initially set up via the console port, they are both designed to function as a DHCP server, allowing you to connect over the network using the PDM for the...
