At 07:43 PM 11/12/01 -0500, Larry Johnson wrote:
>I have client that will not take no for answer.
>
>He feels that the using ConfigMaker from Cisco is an absolute must to
>configure his routers and switches.
>
>I would appreciate your opinions about ConfigMaker and the Pix firewall
>graphic configuration utility that Cisco has also.
>
>Thank you in advance for your thoughts.
>
>LJ
I put these tools as "enabling" devices.  Cisco wants to bridge the gap 
between "laymen" and "cisco qualified" individuals, ConfigMaker and the Pix 
configuration utility does this.  While it does help a neophyte do a 
"similar amount of work" as a skilled worker to some degree, it quickly 
levels off.

Weird issues and bugs and more complicated configurations can always be 
done by a trained individual.  I am sure many others on this list will 
attest, they have setup rock solid configurations without the need for 
these tools.  Many of the professional cisco qualified individuals can work 
much faster than the ConfigMaker or Pix GUI.

I am not going to say "these tools are the work of the Devil!"  However, to 
add some negative points to them.  The Cisco Pix GUI might be opening up a 
possible security hole despite the little ACLs it can have.  Convenience at 
the price of security.  ConfigMaker can work directly or indirectly so that 
is ok I suppose.  Take a look at the list of HTTP configuration tools for 
the routers and switches.  Easy to use.  Also, they have a nasty history of 
security holes.  Inside network only?  Heh.  Most hacks happen from the
inside.

So, while they the tools are ok.  The only ones who say it is an absolute 
must tend to be inexperienced individuals in terms of Cisco 
hardware/software configuration.



-Carroll Kong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26044&t=26022
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to