Cisco PIX 506E - Security Appliance Manuel utilisateur

Quick Start Guide

Cisco PIX 506E Firewall Quick Start Guide

1Check Items Included

2Installing the PIX 506E

3Configuring the PIX 506E

4Optional Maintenance and Upgrade Procedures

About the Cisco PIX 506E Firewall

ThePIX 506Edeliversenterprise-classsecurityforremote

office/branch office (ROBO) environments in a robust,

reliable security appliance. Ideal for securing Internet

connectionsforremote/branchoffices,thePIX 506E,partof

the market-leading Cisco PIX Firewall Series, provides a

wide range of rich security capabilities and remote

management capabilities in a cost-effective,

high-performance solution:

•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)

•Supports over 100 predefined applications, services, and protocols for flexible access control

•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards

•Intrusion protection from over 55 different network-based attacks

•URL filtering of outbound web traffic via industry-leading, third-party URL filtering products

67931

POWER

ACTNETWORK

CISCO PIX 506E

FIREWALL

ware

eatures

•External power supply

•300-MHz processor

•32-MB RAM, 8-MB Flash memory

•1 autosensing 10BaseT Ethernet port for an

outside connection to the Internet (port 0)

•1 autosensing 10BaseT Ethernet port for a

connection to your internal network

•Serial console port for administrative access

•Front panel LEDs for appliance and link

status

•20-Mbps cleartext firewall throughput

•16 Mbps PIX 506E VPN throughput

(3DES/SHA1)

tware

eatures

•Supports PIX Firewall software Version 5.3

and higher, a secure, purpose-built

embedded operating system

•Includesplug-and-playdefaultconfiguration

for simplified installation

•Includes Cisco PIX Device Manager (PDM)

for intuitive, web-based administration of

PIX Firewalls

•Internal DHCP server supports up to

256 DHCP address leases

•Supports up to 25 remote access, or

site-to-site, VPN peers

•Supports 56-bit DES and 168-bit 3DES, with

optional licenses. Refer to“Upgrade to DES

or 3DES” for more information.

1Check Items Included

PIX 506E

Quick Start

Guide

Safety and

Compliance

Guide

Cisco PIX 506E

Console cable adapter

(29-0810-01)

PC terminal adapter

(74-0495-01)

Documentation

Power supply and cable

(US shown)

506E power supply (341-0007-01)

Blue

console cable

(72-1259-01)

Yellow

Ethernet cable

(72-1482-01)

Yellow

Ethernet cable

(72-1482-01)

Cisco PIX

Firewall

Product CD

ETHERNET 0

ETHERNET1 CONSOLE

LINK

USB

ACT

LINK

ACT

POWER

INPUT

2Installing the PIX 506E

Follow these steps to connect the cables:

Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.

Step 2 Use the yellow Ethernet cable (72-1482-01) provided to connect the outside Ethernet

interface, Ethernet 0, to a DSL modem, cable modem, or router.

Step 3 Use the other Ethernet cable (72-1482-01) provided to connect the inside Ethernet interface,

Ethernet 1, to a switch or hub.

ETHERNET0

ETHERNET1CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Computer or other

network device

Power

adapter

RouterLaptop computer Printer

Switch

Yellow

Ethernet

cables

Yellow

Ethernet

cable

Cisco PIX 506E

Internet

71116

Follow these steps to power on the PIX Firewall:

Step 1 Connect the small, square connector of the power supply cable to the power connector on the

rear panel.

Step 2 Check the power LED, if it is green, then the device is powered on. For more information,

refer to the “Check the LEDs” section on page 11.

Step 3 Connect the AC power connector of the power supply input cable to an electrical outlet.

Step 4 Set the power switch to the on (|) position.

ETHERNET 0

ETHERNET 1 CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Cisco PIX 506E

POWER

INPUT

67932

Power supply

3Configuring the PIX 506E

The PIX 506E comes with a factory default configuration that meets the needs of most broadband

networking environments. The factory default configuration on the PIX 506E protects your inside

network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire an

IP address. A default DHCP server address pool is included for hosts on the inside interface.

Instances in which it might be necessary to change or make additional changes to the default

configuration include the following:

•To create administrative and Telnet passwords

Note We highly recommend that you change the administrative and Telnet passwords from

their default settings to secure the administration of the PIX Firewall.

•To configure Point-to-Point Protocol over Ethernet (PPPoE) or a static IP address for an outside

interface

•To configure VPN and Auto Update features

ThePIX 506Econtainsanintegratedconfigurationutility

called Cisco PIX Device Manager (PDM). PDM is a web

browser-basedconfigurationtooldesignedtohelpyouset

up, configure, and monitor the PIX Firewall. PDM is

preinstalled on the PIX 506E. To access PDM, make

sure JavaScript and Java are enabled in your web

browser. For best performance, we recommend that

you use Microsoft Internet Explorer 5.5 or a higher

release. Refer to the Cisco PIX Device Manager

Installation Guide for more information on operating

system and web browser environments supported by

PDM.

PDM Version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these steps

to use the Startup Wizard:

Step 1 If you have not already done so, use an Ethernet cable to connect your PC to the inside port

(Ethernet 1) on the rear panel of the PIX Firewall.

Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the

PIX Firewall) or assign a static IP address to your PC by selecting an address out of the

192.168.1.0 network.

Note The inside interface of the PIX Firewall is assigned 192.168.1.1, so choose a different

IP address.

Step 3 Check the ACT LED on the rear panel of the PIX Firewall (see Table 2 on page 11) to verify

that your PC has basic connectivity to the inside port (Ethernet 1). When connectivity occurs,

the ACT LED next to the port lights up solid green.

Step 4 To access the Startup Wizard, use a PC connected to the inside port and enter the URL

https://192.168.1.1/startup.html into your browser.

Note Remember to add the “s” to “https” or the connection fails. HTTPS (HTTP over SSL)

provides a secure connection between your browser and the PIX Firewall that you are

using PDM to configure or monitor.

Step 5 Do not enter your username or password, just press Enter.

Step 6 Accept the certificates and follow the instructionsin theStartup Wizard. Foronline help, click

the Help button at the bottom of the Startup Wizard window.

4Optional Maintenance and Upgrade Procedures

Upgrade to DES or 3DES

Note The following instructions are applicable to PIX Firewall Version 6.2 and higher releases. If

you are not running PIX Firewall Version 6.2, refer to the Quick Start Guide for the version

of software installed on your PIX Firewall.

To upgrade features you did not specify at the time of purchase, you need to use an activation key. The

activation key lets you add software features to the PIX 506E, such as DES or 3DES.

To obtain a free DES (56-bit) license key for the PIX Firewall, use the IPSec 56-bit Customer

Registration form. Accessing this form requires prior registration on Cisco.com at

http://www.cisco.com/register. However, access to this form does not require a purchase or service

contract. You can register as a guest and then proceed to fill out the form. The form is available at the

following website:

http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=324

Note If you are unable to access this form because you do not have a CCO login, send an e-mail to

licensing@cisco.com. In the e-mail include the PIX Firewall serial number as it appears in the

show version command output and request a free 56-bit DES key.

You must purchase a 3DES (168-bit) license key, or have a service contract, to obtain a 3DES license

key. If you have already purchased a 3DES upgrade, and you have your Cisco PIX Firewall 3DES

upgrade document with the entitlement number printed on it, you can register your license key for use

on your PIX Firewall with the License Registration form. Accessing this form also requires prior

registration on Cisco.com at http://www.cisco.com/register.

The License Registration form is available at the following website:

http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=301

You must also purchase or have a service contract to download PIX Firewall software. Enter the

activation key only after you have downloaded an image—not from the command line or without

rebooting first.

Note You can verify if you have the DES or 3DES feature by entering the show activation-key command.

Follow these steps to use an activation key:

Step 1 Ensure that the image in Flash memory and the Running Image are the same.

Step 2 Make sure that you are in config mode to enter a new activation key.

Step 3 From the CLI, enter the activation-key activation-key-four-tuple command, replacing

activation-key-four-tuple with the activation key obtained from Cisco.

Step 4 Reboot the PIX Firewall by powering it off and then on again.

After the key update is complete, the system reloads to update the running image.

Restore the Default Configuration

You can restore your configuration back to the factory default values in one of the following ways:

•You can start the Startup Wizard at: https://192.168.1.1/startup.html

•Enter the following CLI commands:

Refer to the following website for detailed command information and configuration examples:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/cmdref/index.htm

The Cisco TAC website is available to all customers who need technical assistance. To access the TAC

Website go to:

http://www.cisco.com/tac

Command Description

Step 1 configure factory-default [<inside

ip address> [address mask]] 1

1. If the optional inside IP address and optional address mask are specified, the factory-default configuration

will reflect the specified IP address.

Caution Entering the configure factory-default command erases the current running configuration.

Erases the running configuration and replaces it with

the factory default configuration.

Step 2 write memory Writes the factory default configuration to Flash

memory.

Alternative Ways to Access the PIX 506E

You can access the command-line interface (CLI) for administration using the console port on the PIX

Firewall. To do so, you must run a serial terminal emulator on a PC or workstation.

To connect a console for local administrative access:

Step 1 Plug one end of the console cable adapter into a standard 9-pin PC serial port.

Step 2 Plug one end of the blue console cable (72-1259-01) into the PC terminal adapter.

Step 3 Plug the other end of the blue console cable into the Console port.

Step 4 Configure the PC terminal emulation software or terminal for 9600 baud, 8 data bits, no

parity, and 1 stop bit.

You can also access the CLI using SSH/Telnet to the PIX Firewall. By default, SSH/Telnet access is not

permitted. Use PDM or the console to configure SSH/Telnet access to the PIX Firewall. To Telnet to

the PIX Firewall from the outside perimeter of the firewall, configure an outside IP address and IPSec

for a secure Telnet session. Refer to the Cisco PIX Firewall and VPN Configuration Guide for more

information about how to use the command-line interface (CLI).

67935

ETHERNET 0

ETHERNET 1 CONSOLE

LINK

POWER

INPUT

USB

ACT

LINK

ACT

Cisco PIX 506E

PC terminal adapter Blue console cable

POWER

INPUT

Autres manuels pour PIX 506E - Security Appliance

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Pare-feu

Cisco

Cisco Firepower 2100 Series Manuel utilisateur

Cisco

Cisco TelePresence Server 7010 Manuel utilisateur

Cisco

Cisco PIX-515E Manuel utilisateur

Cisco

Cisco Small Business RV215W Manuel utilisateur

Cisco

Cisco 3100 Series Manuel

Cisco

Cisco Firepower 1010 Manuel utilisateur

Cisco

Cisco M195 Manuel

Cisco

Cisco Firepower 3500 Document technique

Cisco

Cisco Cisco ASA Series Manuel utilisateur

Cisco

Cisco Firepower 4100 Series Manuel d'installation

Cisco

Cisco Small Business RV220W Manuel utilisateur

Cisco

Cisco ASA 5512-X Manuel

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuel utilisateur

Cisco

Cisco Firepower 4100 Series Manuel

Cisco

Cisco Small Business RV215W Mode d’emploi

Cisco

Cisco MX400 Manuel utilisateur

Cisco

Cisco C690 Manuel utilisateur

Cisco

Cisco CSA 90 Series Manuel du produit

Cisco

Cisco ASA 5580 Manuel utilisateur

Cisco

Cisco 3110 Manuel

Cisco

Cisco LightStream 1010 Manuel utilisateur

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manuel utilisateur

Cisco

Cisco Cisco ASA Series Instructions d'installation

Cisco

Cisco PIX 501 Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

GTA

GTA GB-200 Manuel utilisateur

Trend Micro

Trend Micro Deep Edge Manuel utilisateur