The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the Ask the Author form.

Q: Does the PIX/ASA support other desktop protocols, such as AppleTalk and IPX?

A: The PIX/ASA supports only IP. If you need to pass AppleTalk or IPX protocols through the PIX/ASA, you must encapsulate them within an IP tunnel.Tunneling of protocols through the PIX can be dangerous and should only be done in a controlled environment.

Q: What routing protocols does the PIX/ASA support?

A: The PIX/ASA can support static routing, RIP (versions 1 and 2), and OSPF.The

PIX/ASA does not support EIGRP and IGRP, Cisco s proprietary routing protocols.

Q: Can the PIX/ASA protect the internal LAN from viruses or worms?

A: By default, the PIX/ASA does provide some application-level protection for popular applications such as FTP and mail. In addition, the PIX does have IDS feature that can protect against 55 predefined attack signatures, providing protection against some popular DoS attacks. However, to protect against viruses and/or worms, you should consider an ASA with the AIP-SSM or CSC-SSM instead of PIX firewall to take advantage of the advanced filtering capabilities the AIP-SSM and CSC-SSM provide.

Q: Can a PIX 515 and PIX 515E used together for...