Any Cisco PIX Experts out there

[Jeff Mottle]

Anyone out there who knows how to administer a Cisco PIX 501? I seem to be having issues with the Access and Translation rules conflicting. It used to work fine and now every time I create a rule and want to make a change, it will not let me delete or create those rules without complaining about something. I got the PIX from my brother in law who is a network analyst, but he's too busy to help me out now.

The other firewalls I've tried are all flaky, the PIX is awesome, except when you need to do anything with it. You pretty much need to be a Cisco trained tech. I try to do all of my edits from the UI, although I've done the odd bit here and there from telnet.

help.

[newdirection]

Jeff,

 

I used to adminster the PIX (a 501) for my old company but it was about 2 years ago, so I'm rusty. I've got all my old configs somewhere so I'd be happy to dig them out and have a look.

 

From what I remember it's better to spit the config out to notepad, print it off and mark it up with a highlighter pen, rather than using the config wizard. Its easier to read and look for discrepncies. You can also backup the config to a TFTP server. It's then easy to reverse any changes you make. I like the notepad option because you can copy the entire config out of notepad and paste it in a super user replacing the setup.

 

What is it specifically complaining about? Are you trying to edit an applied/active Access List? Try creating a new one with the changes and apply that. If you want to PM the config to me (omit sensitive information, IP addresses) I'd take a look but appreciate if you don't want to do this. I was always wary about sharing my config! I can provide you with my old setups because 1) you dont know who I used to work for) 2) i don't work there anymore 3) they're replaced their security now.

 

Happy to help if I can.