Andy,

> Reporting connections is possible with SNMP.  I'm about to pursue that
> myself soon.  I plan to use snmpwalk / snmpget along with MRTG or rrdtool.
> You can get the MIB from Cisco.

My personal favourite is cricket. Quite a nice tool! Check it out if you
have any complex stats needs.

> Failover link - I would GUESS that it can be a slower speed.  Connection
> tables should be transfered across the link - not every data packet.

That's my guess too.

> I have gotten ssh to work with the PIX using DES.  You need to ask for the
> license for this though (and therefore re-load the IOS) and it is free
> (regular 56 bit DES).  The only ssh client I got to work with pure 56 bit
> DES, however is called putty.exe (www.openssh.com - link to putty).  I'm
> pursuing 3DES at a cost.

Well, at least is better than nothing. 

Thanks for your help,

-- p.

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to