Cisco PIX 501 Manuale utente

Quick Start Guide

Cisco PIX 501 Firewall

1Check Items Included

2Installing the PIX 501

3Configuring the PIX 501

4Optional Maintenance and Upgrade Procedures

About the Cisco PIX 501 Firewall

The PIX 501 delivers enterprise-class security for small

offices and telecommuters in a reliable, plug-and-play

security appliance. Ideal for securing high-speed “always

on” broadband environments, the PIX 501, part of the

world-leading Cisco PIX Firewall Series, provides robust

security capabilities, small office networking features, and

powerful remote management capabilities in a compact, all-in-one solution:

•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)

•Supports over 100 predefined applications, services, and protocols for flexible access control

•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards

•In-line intrusion protection from over 55 different network-based attacks

•URL filtering of outbound web traffic via industry-leading, third-party URL filtering products

•Integrated switch allows multiple users to share a single broadband connection

61271

POWER

VPN TUNNEL

LINK/ACT

100 MBPS

1234

CISCO PIX 501

FIREWALL

ware

eatures

•Compact, desktop chassis

•External power supply

•133-MHz processor

•16-MB RAM, 8-MB Flash memory

•1 10/100-Mbps Ethernet interface for an

outside connection to the Internet (port 0)

•Integrated 4-port 10/100-Mbps Ethernet

switch for inside private LAN

(ports 1 through 4)

•Serial console port for administrative access

•Security lock slot for added physical security

•Front panel LEDs for appliance and link

status

•60-Mbps clear text firewall throughput

•4.5-Mbps VPN throughput AES-128/SHA-1

•3-Mbps VPN throughput 3DES/SHA-1

tware

eatures

•Supports PIX Firewall software Version 6.1

and higher, a secure, purpose-built embedded

operating system

•Includes plug-and-play default configuration

for simplified installation

•Includes Cisco PIX Device Manager (PDM)

for intuitive, web-based administration of

PIX Firewalls

•Supports up to 10 active hosts (an active host

is one that has passed traffic through the

PIX Firewall in the last xlate timeout seconds,

or has reserved an authentication connection),

up to 50 users with optional 50-user license,

and unlimited users for unlimited user license

•Internal DHCP server supports up to

32 DHCP address leases with the 10-user

license; up to 128 with the optional 50-user

license, and 256 for the unlimited user license

•Supports up to 10 remote access or site-to-site

VPN peers

1 Check Items Included

POWER

43210CONSOLE

3.3V 4.5A

PIX 501

Quick Start

Guide

Safety and

Compliance

Guide

PIX 501

PC terminal adapter

(74-0495-01)

Documentation

Cable

(US shown)

(72-0259)

Power supply

(341-0008-01)

Blue console cable

(72-1259-01)

Yellow Ethernet cable

(72-1482-01)

Orange Ethernet

Crossover cable

(72-3515-01)

Cisco PIX

Firewall

Product CD

2 Installing the PIX 501

Follow these steps to connect the cables:

Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.

Step 2 Connect Port 0, the outside Ethernet port, to the public network, that is, the Internet:

a. Use the yellow Ethernet cable (72-1482-01) to connect the device to a switch or hub.

b. Use the orange Ethernet crossover cable (72-3515-01) to connect the device to a

cable/DSL/ISDN modem.

Step 3 Connect your PC or other network devices with an Ethernet cable to one of the four switched

inside ports (numbered 1 through 4).

Note Make sure that one of the PCs has TCP/IP installed and is configured to obtain an IP address

automatically through DHCP. Installing TCP/IP and configuring DHCP allows the PC to

communicate with the PIX 501 and the Internet as well as run the PDM Startup Wizard.

POWER

43210CONSOLE

3.3V4.5A

Computer or other

network device

Power

adapter

DSL/Cable/ISDN

modem

Orange

Ethernet

cable

Yellow

Ethernet

cable

PIX 501

Internet

61277

Laptop computer Printer

Make sure the PC interface connected to the PIX 501 inside port, numbered 1 through 4, is set to

autonegotiate for best performance. If autonegotiate is not an option for the PC interface, set the speed

to either 10 or 100 Mbps half duplex. Setting the interface to full duplex causes a duplex mismatch that

significantly impacts the total throughput capabilities of the interface.

Follow these steps to power on the PIX Firewall:

Step 1 Connect the power supply (341-0008-01) with the power cable (72-0259).

Step 2 Connect the small, round connector of the power supply cable to the power connector on the

rear panel.

Step 3 Connect the AC power connector of the power supply input cable to an electrical outlet.

Note The PIX 501 does not have a power switch. Completing Step 3 powers on the device.

Step 4 Check the power LED, if it is solid green, then the device is powered on. For more

information, refer to the “Check the LEDs” section on page 12.

POWER

43210CONSOLE

3.3V4.5A

71331

Power supply

Cisco PIX 501

3 Configuring the PIX 501

The PIX 501 comes with a factory default configuration that meets the needs of most broadband

networking environments. The factory default configuration on the PIX 501 protects your inside

network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire its

IP address. A default DHCP server address pool is included for hosts on the inside interface.

By default, the PIX Firewall denies all inbound traffic through the outside interface. Based on your

network security policy, you should consider configuring the PIX Firewall to deny all ICMP traffic to

the outside interface, or any other interface you deem necessary, by entering the icmp command. The

icmp command controls responses to ICMP traffic thatis directed atoneof the PIX Firewallinterfaces.

If no ICMP control list is configured, then the PIX Firewall will respond to all ICMP requests received

on any interface (including the outside interface).

For more information about the icmp command, refer to the Cisco PIX FirewallCommand Reference.

Instances in which it might be necessary to change or make additional changes to the default

configuration include the following:

•To create administrative and Telnet passwords

Note We highly recommend that you change the administrative and Telnet passwords from

their default settings (no password) to secure the administration of your PIX Firewall.

•To configure Point-to-Point Protocol over Ethernet (PPPoE) or a static IP address for an outside

interface

•To configure VPN and Auto Update features

The PIX 501 contains an integrated configuration utility

called Cisco PIX Device Manager (PDM). PDM is a web

browser-based configuration tool designed to help you set

up, configure, and monitor the PIX Firewall. PDM is

preinstalled on the PIX 501. To access PDM, make sure

JavaScript andJavaare enabledin your web browser.Refer

to the Cisco PIX Device Manager Installation Guide for

more information on the operating system and web

browser environments supported by PDM.

PDM Version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these

steps to use the Startup Wizard:

Step 1 If you have not already done so, use an Ethernet cable to connect your PC to one of the four

switched inside ports (numbered 1 through 4) on the rear panel of the PIX Firewall.

Note Ethernet1 interface in the PIX 501 is the internal interface connecting the

PIX Firewall to the four switched inside ports with a fixed speed of 100 Mbps full

duplex. The PIX Firewall automatically negotiates the inside interface speed, and this is

not configurable.

Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the

PIX Firewall) or assign a static IP address to your PC by selecting an address outside of the

192.168.1.0 network.

Note The inside interface of the PIX Firewall is assigned 192.168.1.1, so choose a different

IP address.

Step 3 Check the LINK LED to verify that your PC has basic connectivity to the PIX Firewall on one

of the inside ports (numbered 1 through 4). When connectivity occurs, the LINK LED on the

front panel of the PIX Firewall lights up solid green.

Step 4 To access the Startup Wizard,use a PCconnected to one ofthe PIX Firewall switch ports andenter

the URL https://192.168.1.1/startup.html into your browser.

Note Remember to add the “s” to “https” or the connection fails. HTTPS (HTTP over SSL)

provides a secure connection between your browser and the PIX Firewall that you are

using PDM to configure or monitor.

Step 5 Leave both the userword and password boxes empty. Press Enter.

Step 6 Accept the certificates and follow the instructions in the Startup Wizard. For online Help,

click the Help button at the bottom of the Startup Wizard window.

4 Optional Maintenance and Upgrade Procedures

Upgrade to DES, 3DES/AES, or the User Licenses

Note The following instructions apply to PIX Firewall Version 6.2 and higher releases. If you are

not running PIX Firewall Version 6.2 or higher, refer to the Quick Start Guide for the version

of software installed on your Cisco PIX Firewall.

To upgrade features you did not specify at the time of purchase, you need to use an activation key.

The activation key lets you add software features to the PIX Firewall, such as DES (Free) or 3DES/AES,

or upgrade the user license at an additional cost.

If you are a registered user of Cisco Connection Online and would like to obtain a DES or a 3DES/AES

license key, or upgrade your user license for the PIX Firewall, go to the following website:

http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl

If you are not a registered user of Cisco Connection Online, go to the following website:

http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl

Note If you are unable to access this form because you do not have a CCO login, send an e-mail to

licensing@cisco.com. In the e-mail include the PIX Firewall serial number, as it appears in the

show version command output, and request a 56-bit DES or a 168-bit 3 DES license key.

You must also purchase or have a service contract to download PIX Firewall software.

Note You can verify if you have DES, 3DES/AES, or the user license by entering the

show activation-key command.

To obtain an activation key, you need a Product Authorization Key, which you can purchase from

your Cisco account representative. After obtaining the Product Authorization Key, register it on the

web to obtain an activation key by performing the following steps:

Step 1 Connect a web browser to one of the following websites (the URLs are case-sensitive):

•Go to the following website if you are a registered user of Cisco Connection Online:

http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl

•Go to the following website if you are not a registered user of Cisco Connection Online:

http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl

Step 2 Obtain the serial number for your PIX Firewall by entering the show version command.

Step 3 Enter the following information, when prompted:

•Your Product Authorization Key

•The serial number for your PIX Firewall

•Your e-mail address

The activation key is generated automatically and sent to the e-mail address that you provide.

Follow these steps to use the activation key:

Step 1 Ensure that the image in Flash memory and the running image are the same.

Step 2 From the command-line interface (CLI) enter the configure terminal command to start

configuration mode.

Step 3 Enter the activation-key activation-key-four-tuple command. Replace

activation-key-four-tuple with the activation key you obtained with your new license.

Step 4 Use the exit command to exit configuration mode. This command is the same as the quit

command.

Step 5 Enter the write memory command to save the configuration.

Step 6 To use the new activation key, reboot the PIX Firewall.

For more information on activation key examples or upgrading software, refer to the

Cisco PIX Firewall and VPN Configuration Guide.

Active Host Limitation

The PIX 501 supports up to 32 DHCP address leases with a 10-user license, up to 128 with an optional

50-user license, and 256 with an unlimited user license. A host is considered active when any of the

following statements are true:

•The host has passed traffic through the PIX Firewall during the time configured for the xlate

timeout interval

•The host has an established NAT/PAT translation through the PIX Firewall

•The host has an established TCP connection or UDP session through the PIX Firewall

•The host has an established user authentication through the PIX Firewall

Refer to the System Properties>Advanced>Timeouts online Help topic within PDM for the default

inactivity timeout values associated with each of the preceding bulleted items.

Restore the Default Configuration

You can restore your configuration back to the factory default values in one of the following ways:

•You can start the Startup Wizard at: https://192.168.1.1/startup.html

•Enter the following CLI commands:

Note The config factory-default command considers both licensing and platform in creating DHCP

pool sizes of 32, 128, or 253 for the PIX 501. A user with an unlimited license can manually

change the IP address and netmask to increase the DHCP pool size to 256.

Caution Entering the config factory-default command erases the current running configuration.

Command Description

Step 1 configure factory-default [inside

ip address [address_mask]] 1

1. If the optional inside IP address and address mask are specified, the factory-default configuration will

reflect the specified IP address.

Erases the running configuration and replaces it with

the factory default configuration.

Step 2 write memory Writes the factory default configuration to Flash

memory.

Altri manuali per PIX 501

Indice

Altri manuali Cisco Firewall

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco Firepower 2100 Series Manuale utente

Cisco

Cisco 881W - Integrated Services Router Wireless Manuale di istruzioni

Cisco

Cisco LightStream 1010 Manuale di istruzioni

Cisco

Cisco Small Business RV220W Manuale di istruzioni

Cisco

Cisco 5580-40 - ASA Firewall Edition Manuale

Cisco

Cisco ASA 5506-X Manuale utente

Cisco

Cisco Small Business RV215W Manuale utente

Cisco

Cisco amp threat grid Manuale utente

Cisco

Cisco RV120W Manuale di istruzioni

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manuale utente

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manuale utente

Cisco

Cisco Small Business RV215W Manuale utente

Cisco

Cisco Firepower 4100 Series Manuale di installazione e funzionamento

Cisco

Cisco C170 Manuale utente

Cisco

Cisco PIX 520 - PIX Firewall 520 Manuale utente

Cisco

Cisco M690 Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco ASA 5506-X Istruzioni per l'installazione

Cisco

Cisco Firepower 4100 Series Manuale utente

Cisco

Cisco Firepower 4100 Series Manuale

Cisco

Cisco ISA3000-4C-K9 Manuale

Cisco

Cisco Meraki MX64 Manuale utente

Manuali Firewall popolari di altre marche

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

H3C

H3C SecPath F5000-AI-15 Manuale utente

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente

Trend Micro

Trend Micro Deep Edge Manuale utente