<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Elvenhome eller no &#187; PIX</title>
	<atom:link href="http://elvenhome.no/category/pix/feed" rel="self" type="application/rss+xml" />
	<link>http://elvenhome.no</link>
	<description>tulletanker i tulleverden</description>
	<lastBuildDate>Mon, 31 Oct 2011 14:25:25 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>Cisco PIX + MS IAS = using ldap credentials across the floor</title>
		<link>http://elvenhome.no/cisco-pix-ms-ias-using-ldap-credentials-across-the-floor</link>
		<comments>http://elvenhome.no/cisco-pix-ms-ias-using-ldap-credentials-across-the-floor#comments</comments>
		<pubDate>Fri, 01 Aug 2008 06:59:02 +0000</pubDate>
		<dc:creator>gilrim</dc:creator>
				<category><![CDATA[nettverk]]></category>
		<category><![CDATA[PIX]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://elvenhome.no/cisco-pix-ms-ias-using-ldap-credentials-across-the-floor</guid>
		<description><![CDATA[Never had the need to set up anything Radius-related before, so that&#8217;ll be a bit interesting. Theres been talk about getting some sort of SSO system into the works at my new job, so I guess this&#8217;ll be part of &#8230; <a href="http://elvenhome.no/cisco-pix-ms-ias-using-ldap-credentials-across-the-floor">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Never had the need to set up anything Radius-related before, so that&#8217;ll be a bit interesting. Theres been talk about getting some sort of SSO system into the works at my new job, so I guess this&#8217;ll be part of it.</p>
<p><a href="http://www.blindhog.net/cisco-aaa-login-authentication-with-radius-ms-ias/">blindhog.net » Cisco AAA login authentication with Radius (MS IAS)</a><br />
<blockquote></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://elvenhome.no/cisco-pix-ms-ias-using-ldap-credentials-across-the-floor/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco PIX and other curiosities</title>
		<link>http://elvenhome.no/cisco-pix-and-other-curiosities</link>
		<comments>http://elvenhome.no/cisco-pix-and-other-curiosities#comments</comments>
		<pubDate>Wed, 30 Jul 2008 07:32:40 +0000</pubDate>
		<dc:creator>gilrim</dc:creator>
				<category><![CDATA[nettverk]]></category>
		<category><![CDATA[PIX]]></category>

		<guid isPermaLink="false">http://elvenhome.no/cisco-pix-and-other-curiosities-2</guid>
		<description><![CDATA[I recently started a new job as ICT Manager for a medium sized international company. At the core of our network here, we&#8217;ve got Cisco PIX boxen. As the need for being able of punching a hole in the firewall &#8230; <a href="http://elvenhome.no/cisco-pix-and-other-curiosities">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I recently started a new job as ICT Manager for a medium sized international company. At the core of our network here, we&#8217;ve got Cisco PIX boxen. As the need for being able of punching a hole in the firewall arises at times, I&#8217;ve got to get my head around the proparitary cisco os it&#8217;s running (nope, it&#8217;s not IOS).</p>
<p>The <a href="http://en.wikipedia.org/wiki/Cisco_PIX" target="_blank">Cisco PIX</a> product line was introduced in 1994 as a &#8220;call-center for your internets&#8221;, the abbreviation meaning &#8220;Private Internet eXchange&#8221; (playing on familiar need for a PBX (Private Branch eXchange) for telephone systems). The products have since then gone through several redesigns and iterations, before getting the final blow this January when the end-of-sales and end-of-life dates announced by Cisco. <a href="http://en.wikipedia.org/wiki/Cisco_ASA" target="_blank">Cisco ASA</a> (Adaptive Security Appliance) is the successor of PIX (IDP 4.2k and vpn 3k concentrators) and it&#8217;s using PIX OS 7.0 (Finesse), and later in 8.0 moves over to a linux kernel with proparitary tools and programs.</p>
<p>For starters, I&#8217;ve found a <a href="http://www.gns3.net/" target="_blank">PIX system emulator called GNS3</a> that&#8217;ll let you fetch binary images and run them locally, to test out commands and configurations before taking down the corp network. There are a few tutorials out there, this one presumably covers the basics: <a href="http://www.secmanager.com/how_to_configure_pix_firewall_part1" target="_blank">How to configure Cisco PIX firewall</a>. When you&#8217;ve tried that without any luck, you could even move on to <a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/overvw.html" target="_blank">The official documentation</a> (<span class="content"><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/bafwcfg.html">Basic Firewall Configuration, </a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/mngacl.html">Managing Network Access and Use, </a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/ipsecint.html">Basic VPN Configuration, </a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/sysmgmt.html">PIX Firewall System Management, </a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.html">Using PIX Firewall Failover, </a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/upgrade.html">Upgrading PIX Firewall Software</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/cfgforms.html">, Firewall Configuration Form</a></span> <span class="content"> Also as pdf&#8217;s:<a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/overvw.pdf">1</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/bafwcfg.pdf">2</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/mngacl.pdf">3</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/ipsecint.pdf">4</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/sysmgmt.pdf">5</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.pdf">6</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/upgrade.pdf">7</a><a href="http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/cfgforms.pdf">8</a></span>). Oh, and then you have <a href="http://www.routergod.com/deniserichards/" target="_blank">this nsfw step-by-step guide.</a> <a href="http://www.secmanager.com/how_to_configure_pix_firewall_part1" target="_blank">This one</a>, on the other hand, is safe for work</p>
]]></content:encoded>
			<wfw:commentRss>http://elvenhome.no/cisco-pix-and-other-curiosities/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

