PIX PDM [7:74758]

2003-09-03 Thread Gary Leong
Our security group is recommending not to use PDM to
configure our Pix firewalls.  They did not give any
reason for their recommendation.  Does anyone know why
PDM should not be used?

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74758&t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: PIX PDM [7:74758]

2003-09-04 Thread Jason Viera
"Our security group is recommending not to use PDM to
configure our Pix firewalls.  They did not give any
reason for their recommendation.  Does anyone know why
PDM should not be used?"

From what I understand there are a few commands that can't be used from
the PDM (they require the use of the CLI), also using a web-based
configuration tool seems to undermine the very premise of network security,
if you think about it how many companies use the other web-based software
(for configuration) that Cisco has made available. Also , if you look at the
software that Cisco has produced in the past it hasn't been very reliable
(due to the fact that it is freely available and gives no ROI) an example
would be their TFTP server software or the Cisco Configmaker. From what I
understand the PDM was made available to compete with the other vendors web
based configuration software, obviously there is a demand from the customers
for such software(So it could be possible that Cisco is actually making am
attempt on this one), but whether or not PDM is just a marketing tool or a
viable configuration solution I don't know. What is the reason that you are
considering using the PDM software in the first place???
HTH,  Jason

""Gary Leong""  wrote in message
news:[EMAIL PROTECTED]
> Our security group is recommending not to use PDM to
> configure our Pix firewalls.  They did not give any
> reason for their recommendation.  Does anyone know why
> PDM should not be used?
>
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> **Please support GroupStudy by purchasing from the GroupStudy Store:
> http://shop.groupstudy.com
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74769&t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: PIX PDM [7:74758]

2003-09-08 Thread [EMAIL PROTECTED]
Basic config PDM OK
Exotic > CLI

HIGH security? No pdm no ssh no telnet no snmp 

large shop> maybe from a private management segment snmp
small shop > inside intf PDM management/monitoring + extra access-list

Always include radius/tacacs+ in the process for auth

Always work from policies.

Martijn 


-Oorspronkelijk bericht-
Van: Gary Leong [mailto:[EMAIL PROTECTED]
Verzonden: donderdag 4 september 2003 4:09
Aan: [EMAIL PROTECTED]
Onderwerp: PIX PDM [7:74758]


Our security group is recommending not to use PDM to
configure our Pix firewalls.  They did not give any
reason for their recommendation.  Does anyone know why
PDM should not be used?

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74941&t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: PIX PDM [7:74758]

2003-09-10 Thread Philip Suen
I have experienced by using PDM to configure VPN is unstable. Everytime I
try to modify the particular VPN connection. All of the connection will be
disconnected.

In addition, everytime if you have changed the configuration in PDM, you
must remember to save it manually, otherwise reboot will erase all of the
config.

Finally, before you make any change within PDM, you should download the
latest version configuration from PIX. Otherwise, you will erase the running
config.

Philip

""Gary Leong""  wrote in message
news:[EMAIL PROTECTED]
> Our security group is recommending not to use PDM to
> configure our Pix firewalls.  They did not give any
> reason for their recommendation.  Does anyone know why
> PDM should not be used?
>
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> **Please support GroupStudy by purchasing from the GroupStudy Store:
> http://shop.groupstudy.com
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=75162&t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html