Re: Questions about PIX firewall [7:24634]
> 1. To configure a PIX, is there any GUI interface or need to use Command > Line Interface? If it has GUI interface, is it bundle with a PIX or need to > purchase separately? Yes and it comes with the PIX. You'll hate it once you use it. > 2. We plan to use 2 PIX for HA solution. Is it stable? Sorry what is HA? > 3. Is there any materials to describe the PIX failover? > Yep. Here's the URL http://www.cisco.com/warp/public/110/failover.html Regards, John Huston A+ N+ CNE MCSE CCDP, CCNP bfd and xyz > Regards, > Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56229&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Questions about PIX firewall [7:24634]
The GUI is great for some things but overall I still like the CLI for general day-to-day changes. The GUI is great for monitoring stats such as CPU, memory, and etc. In my experience the failover/HA pix solution is very stable. Depending on your setup it can be immediate or just quick. If you're doing LAN based failover it all depends on how much you trust your network.you can tell the primary unit to poll the secondary every second if you want but if you ever have a latency problem then the secondary unit will kick in once it doesn't receive a response from the primary even though it's working fine. I've always thought a 5 second interval was appropriate but your mileage may vary. If you're doing a local solution with a failover cable then the secondary unit typically kicks in immediately. We've done several tests where we pull the power on the primary and nobody even knows. From what I understand it doesn't work 'quite' as fast if the primary unit simply crashes but I haven't had that happen yet (fingers crossed) so I can't say for certain. I have had a couple problems when pushing the load back to the primary unit.it works, but sometimes you do see a pause in the traffic flow. -Original Message- From: John Huston [mailto:nomail@;nomail.com] Sent: Thursday, October 24, 2002 1:32 PM To: [EMAIL PROTECTED] Subject: Re: Questions about PIX firewall [7:24634] > 1. To configure a PIX, is there any GUI interface or need to use > Command Line Interface? If it has GUI interface, is it bundle with a > PIX or need to > purchase separately? Yes and it comes with the PIX. You'll hate it once you use it. > 2. We plan to use 2 PIX for HA solution. Is it stable? Sorry what is HA? > 3. Is there any materials to describe the PIX failover? > Yep. Here's the URL http://www.cisco.com/warp/public/110/failover.html Regards, John Huston A+ N+ CNE MCSE CCDP, CCNP bfd and xyz > Regards, > Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56232&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Questions about PIX firewall [7:24634]
Hi backing up what's already been posted, we've changed from Checkpoint on Solaris to PIX. For the last 6 months we have had a very stable environment with failover implemented too. The cli is excellent if your familiar with IOS, it doesn't have the overhead and terrible sluggish response of the Checkpoint GUI -try remote logging on Checkpoints GUI, For most things PIX check http://www.cisco.com/warp/customer/707/#pix cheers Pat dovelet wrote: > Hi all, > > Our company wants to use PIX 515 firewall but I never use it before. I have > some questions and I hope someone can help me. > > 1. To configure a PIX, is there any GUI interface or need to use Command > Line Interface? If it has GUI interface, is it bundle with a PIX or need to > purchase separately? > 2. We plan to use 2 PIX for HA solution. Is it stable? > 3. Is there any materials to describe the PIX failover? > > Regards, > Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42819&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Questions about PIX firewall [7:24634]
Yeah, there is a GUI but you'll be better off just trying to get used to the CLI. It's just better, trust me. By HA I suppose you mean High Availability, there is a good link describing how failover works: http://www.cisco.com/warp/customer/110/failover.html We've had good experience with failover, I think it rocks ! ""dovelet"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > Our company wants to use PIX 515 firewall but I never use it before. I have > some questions and I hope someone can help me. > > 1. To configure a PIX, is there any GUI interface or need to use Command > Line Interface? If it has GUI interface, is it bundle with a PIX or need to > purchase separately? > 2. We plan to use 2 PIX for HA solution. Is it stable? > 3. Is there any materials to describe the PIX failover? > > Regards, > Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=24675&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Questions about PIX firewall [7:24634]
See comments inline: ""dovelet"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > Our company wants to use PIX 515 firewall but I never use it before. I have > some questions and I hope someone can help me. > > 1. To configure a PIX, is there any GUI interface or need to use Command > Line Interface? If it has GUI interface, is it bundle with a PIX or need to > purchase separately? It has a CLI. It also comes with a GUI. You don't need to purchase it separately. > 2. We plan to use 2 PIX for HA solution. Is it stable? Ok. I give up, what's HA solution? Yes, the pix is stable. > 3. Is there any materials to describe the PIX failover? PIX firewall is described in the documentation. You can also search CCO for "pix failover" It's very simple, taking just a few commands. > > Regards, > Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=24649&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Questions about PIX firewall [7:24634]
Hi all, Our company wants to use PIX 515 firewall but I never use it before. I have some questions and I hope someone can help me. 1. To configure a PIX, is there any GUI interface or need to use Command Line Interface? If it has GUI interface, is it bundle with a PIX or need to purchase separately? 2. We plan to use 2 PIX for HA solution. Is it stable? 3. Is there any materials to describe the PIX failover? Regards, Dovelet Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=24634&t=24634 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
