Well, every once in a while my silly cheesy Microsoft Outlook Express
decides to not really post when I tell it to (last 2 posts about PIX v6
software).  Also, there is a new IDS v2 Beta test coming out in June for
free.

Anyway, yesterday PIX OS v6.0(1) was released, as well as an add-on GUI web
interface (SSL/https based).  Seems very cool from what I've played with it.
It has a Checkpoint Firewall-1 sort of rules list, and allows you to name
hosts/networks (I guess this feature was already there in the CLI, but
seemed pointless then to use it).

Some things I've seen so far that it lacks:  Even though you can view the
rules list, you can't just drag and drop the rules to re-order them (you can
cut'n'paste one rule at a time, which is slow and you might as well do it in
notepad and dump it into an ssh session).  It doesn't support VPN commands
(you've got to do that all in CLI on your own).  And as close as it is to
Checkpoint, it's still not there as you can't create "custom" objects (like
grouping a number of hosts/networks/protocols).  Still, it's very nice and a
great step toward a GUI interface and make configuring most items very easy
without having to crack open the manual (the built-in help is great,
compared to the very lacking CLI help that is nothing like IOS descriptive
help).

The graphing utility is nice gee-wiz eye-candy stuff as well.  Plus, they
finally added a 'show cpu utilization' command, which can also be graphed
(very necessary as soon as you start adding VPN tunnels).

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5505&t=5505
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to