Cisco PIX 506 - Firewall Manuale utente

Quick Start Guide

Cisco PIX 506/506E Firewall

Quick Start Guide

For Cisco PIX Firewall Version 6.2 and PDM Version 2.0

1About the Cisco PIX 506/506E Firewall 2

2Check Items Included 3

3Connect the Cables 4

4Power On the PIX 506/506E 5

5Check the LEDs 6

6Configuring the PIX 506/506E 7

7PDM Startup Wizard 8

8Alternative Ways to Access the PIX 506/506E 10

9Upgrade to DES or 3DES 11

10 Restore the Default Configuration 12

1About the Cisco PIX 506/506E

Firewall

The PIX 506/506E delivers enterprise-class security for

remote office/branch office environments in a robust,

reliable security appliance. Ideal for securing Internet

connections for remote/branch offices, the PIX 506/506E,

part of the market-leading Cisco PIX Firewall Series,

provides a wide range of rich security capabilities and

remote management capabilities in a cost-effective,

high-performance solution:

•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)

•Supports over 100 predefined applications, services, and protocols for flexible access control

•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards

•Intrusion protection from over 55 different network-based attacks

•URL filtering of outbound web traffic via industry-leading, third-party URL filtering products

POWER

ACT NETWORK

CISCO PIX 506E

FIREWALL

ware

eatures

•External power supply

•200-MHz (PIX 506)/300-MHz (PIX 506E)

processor

•32-MB RAM, 8-MB Flash memory

•1 autosensing 10BaseT Ethernet port for an

outside connection to the Internet (port 0)

•1 autosensing 10BaseT Ethernet port for a

connection to your internal network

•Serial console port for administrative access

•Front panel LEDs for appliance and link

status

•20-Mbps cleartext firewall throughput

•10 Mbps (PIX 506)/16 Mbps (PIX 506E)

VPN throughput (3DES/SHA1)

tware

eatures

•Supports PIX Firewall version 6.2 a secure,

purpose-built embedded operating system

•Includes plug-and-play default configuration

for simplified installation

•Includes Cisco PIX Device Manager (PDM)

for intuitive, web-based administration of

PIX Firewalls

•Internal DHCP server supports up to

256 DHCP address leases

•Supports up to 5 remote access, or

site-to-site, VPN peers

•Supports 56-bit DES and 168-bit 3DES, with

optional licenses. Refer to“Upgrade to DES

or 3DES” for more information.

2Check Items Included

PIX 506E

Quick Start

Guide

Safety and

Compliance

Guide

Cisco PIX 506E

Console cable adapter

(29-0810-01)

PC terminal adapter

(74-0495-01)

Documentation

Power supply and cable

(US shown)

506E power supply (341-0007-01)

Blue

console cable

(72-1259-01)

Yellow

Ethernet cable

(72-1482-01)

Yellow

Ethernet cable

(72-1482-01)

Cisco PIX

Firewall

Product CD

ETHERNET 0

ETHERNET 1 CONSOLE

LINK

USB

ACT

LINK

ACT

POWER

INPUT

3Connect the Cables

Follow these steps to connect the cables:

Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.

Step 2 Use the yellow Ethernet cable (72-1482-01) provided to connect the outside Ethernet

interface, Ethernet 0, to a DSL modem, cable modem, or router.

Step 3 Use the other Ethernet cable (72-1482-01) provided to connect the inside Ethernet interface,

Ethernet 1, to a switch or hub.

ETHERNET0

ETHERNET1 CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Computer or other

network device

Power

adapter

Router

ptop computer

Printer

Switch

Yellow

Ethernet

cables

Yellow

Ethernet

cable

Cisco PIX 506E

Internet

71116

4Power On the PIX 506/506E

Follow these steps to power on the PIX Firewall:

Step 1 Connect the small, square connector of the power supply cable to the power connector on the

rear panel.

Step 2 Connect the AC power connector of the power supply input cable to an electrical outlet.

Step 3 Set the power switch to the on (|) position.

ETHERNET 0

ETHERNET 1 CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Cisco PIX 506E

POWER

INPUT

67932

Power supply

5Check the LEDs

If all LEDs are operating as expected (see Table 1 and Table 2), this concludes the hardware

installation. The pages that follow include instructions on running PDM and additional optional

procedures.

Table 1 PIX 506/506E Front Panel LEDs

LED State Description

POWER Green The device is powered on.

Off The device is powered off.

ACT Flashing green The software image has been loaded.

Off The device is powered off.

Network Flashing green One or more network interfaces are passing traffic.

Off No network interfaces are passing traffic.

Table 2 PIX 506/506E Rear Panel LEDs

LED State Description

ACT On Network activity is present on the port.

Off No network activity is present on the port.

CISCO PIX 506E

FIREWALL

67933

POWER ACT NETWORK

Insert picture of 506/506E here.

ACT LINK LINK

POWER

INPUT

ACT

CONSOLE

ETHERNET 0 USB

ETHERNET 1

78186

6Configuring the PIX 506/506E

The PIX 506/506E comes with a factory default configuration that meets the needs of most broadband

networking environments. The factory default configuration on the PIX 506/506E protects your inside

network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire an

IP address. A default DHCP server address pool is included for hosts on the inside interface.

PDM contains a Startup Wizard that lets you easily change settings to suit your needs.

Instances in which it might be necessary to change or make additional changes to the default

configuration include the following:

•To create administrative and Telnet passwords

Note We highly recommend that you change the administrative and Telnet passwords from

their default settings to secure the administration of the PIX Firewall.

•To configure Point-to-Point Protocol over Ethernet (PPPoE) or a static IP address for an outside

interface

•To configure VPN and Auto Update features

LINK On Data is passing on the port.

Off No data is passing on the port.

Table 2 PIX 506/506E Rear Panel LEDs

LED State Description

7PDM Startup Wizard

The PIX 506/506E contains an integrated configuration

utility called Cisco PIX Device Manager (PDM). PDM is

a web browser-based configuration tool designed to help

you set up, configure, and monitor the PIX Firewall.

PDM is preinstalled on the PIX 506/506E. To access

PDM, make sure JavaScript and Java are enabled in

your web browser. For best performance, we

recommend that you use Microsoft Internet Explorer

5.5 or a higher release. Refer to the Cisco PIX Device

Manager Installation Guide for more information on

operating system and web browser environments

supported by PDM.

PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these steps

to load PDM and use the Startup Wizard:

Step 1 Use an Ethernet cable to connect your PC to the inside port (Ethernet 1) on the rear panel of

the PIX Firewall.

Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the

PIX Firewall) or assign a static IP address to your PC by selecting an address out of the

192.168.1.0 network.

Note The inside interface of the PIX Firewall is assigned 192.168.1.1, so choose a different

IP address.

Step 3 Check the ACT LED on the rear panel of the PIX Firewall (see Table 2 on page 6) to verify

that your PC has basic connectivity to the inside port (Ethernet 1). When connectivity occurs,

the ACT LED next to the port lights up solid green.

Step 4 To access the Startup Wizard, use a PC connected to the inside port and enter the URL

https://192.168.1.1/startup.html into your browser.

Note It is very important to enter the “s” in “https://192.168.1.1,” which indicates

a secure connection. If you enter “http://192.168.1.1” without the “s” in

“https,” you cannot access the PIX Firewall.

Step 5 Accept the certificates and follow the instructions in the Startup Wizard. For online help, click

the Help button at the bottom of the Startup Wizard window.

8Alternative Ways to Access the PIX 506/506E

You can use a serial terminal emulator from a PC or workstation connected to the Console port for

local administrative access.

You can also use PDM or a console to configure Telnet access to the PIX 506/506E. By default, Telnet

access is not permitted. To Telnet to the PIX 506/506E from the outside perimeter of the firewall,

configure an outside IP address and IPSec for a secure Telnet session. For more information, refer to

the Cisco PIX Firewall and VPN Configuration Guide.

To connect a console for local administrative access:

Step 1 Plug one end of the console cable adapter into a standard 9-pin PC serial port.

Step 2 Plug one end of the blue console cable (72-1259-01) into the PC terminal adapter.

Step 3 Plug the other end of the blue console cable into the Console port.

Step 4 Configure the PC terminal emulation software or terminal for 9600 baud, 8 data bits, no

parity, and 1 stop bit.

Refer to the Cisco PIX Firewall and VPN Configuration Guide for information about how to use the

command-line interface (CLI).

67935

ETHERNET 0

ETHERNET 1 CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Cisco PIX 506E

PC terminal adapter

Blue console cable

POWER

INPUT

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Cisco Firewall

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco Firepower 2120 Manuale

Cisco

Cisco ASA 5512-X Manuale utente

Cisco

Cisco 3110 Manuale

Cisco

Cisco C170 Manuale utente

Cisco

Cisco ASA 5506-X Guida rapida

Cisco

Cisco Small Business RV215W Manuale utente

Cisco

Cisco FMC 1600 Manuale

Cisco

Cisco FirePOWER 7000 Manuale utente

Cisco

Cisco Cisco ASA Series Istruzioni per l'installazione

Cisco

Cisco Firepower 9300 Manuale

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco PIX 520 - PIX Firewall 520 Manuale utente

Cisco

Cisco Spam Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco Firepower 3500 Documento tecnico

Cisco

Cisco 2100 Series Manuale utente

Cisco

Cisco MX400 Manuale utente

Cisco

Cisco LightStream 1010 Manuale di istruzioni

Cisco

Cisco MEREAKI MX65W Manuale utente

Cisco

Cisco Meraki MX100 Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale

Cisco

Cisco FPR1010-ASA-K9 Manuale utente

Manuali Firewall popolari di altre marche

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

H3C

H3C SecPath F5000-AI-15 Manuale utente

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente

Trend Micro

Trend Micro Deep Edge Manuale utente