Re: Cisco PIX OS 7.0 in Cisco http://www.dslreports.com/forum/r12926865 en Sat, 28 Nov 2009 23:20:03 EDT Sat, 28 Nov 2009 23:20:03 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,15523077 robinhoodis : Let us know if you have figured out how to do this]]> http://www.dslreports.com/forum/remark,15523077 Mon, 20 Feb 2006 21:41:51 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,15523067 robinhoodis : how do you format the filesystem
I have tried
no flashfs
and
clear flashfs
after doing those commands I see the following, but I still see the filesystem restored after I reboot.

pixfirewall# clear flashfs
pixfirewall# show flashfs
flash file system: version:0 magic:0x0
file 0: origin: 0 length:0
file 1: origin: 0 length:0
file 2: origin: 0 length:0
file 3: origin: 0 length:0
file 4: origin: 0 length:0]]> http://www.dslreports.com/forum/remark,15523067 Mon, 20 Feb 2006 21:40:17 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14874149 anon : pix 506e use normal sdram.
i try to give it 32MB,64MB,128MB pc100 sdram,
all ok.
i upgrade my 506e to pix os 7.04, and found
that vlan can not use. i want to create
vlans for dmz and outside at ethernet0, but
7.04 only allow me create one vlan at 506e,
although the license say i can have two vlans.
it must be a bug :D
i can create two vlans at 6.3.4
pix license bug is so ugly. anyone ever try to hack
these limits?]]> http://www.dslreports.com/forum/remark,14874149 Thu, 24 Nov 2005 12:21:49 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14858209 bsteinmann : Hi everyone,

I also tried to get the v7 running on a PIX-520 and got the same result as yash - constant reboots. But trying to get it back to the old version would not work. It crashes at the attempt to flash it via boot helper disk. Booting is no problem, transfering the "IOS" via tftp neither but when the PIX puts the received IOS on the flash card it crashes...

Searching the net I found »seclists.org/lists/firewall-wiza···023.html but this was not related to putting v7 on a 520 but the normal upgrade process. But it's essentially the same with me.

Any ideas?
Thanks in advance
Bjoern]]> http://www.dslreports.com/forum/remark,14858209 Tue, 22 Nov 2005 04:45:35 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14835778 SodaAnt : What kind of memory does a 506E use and what is the maximum it can be upgraded to?]]> http://www.dslreports.com/forum/remark,14835778 Fri, 18 Nov 2005 17:56:16 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14523214 Martyboy : I have actually seen one guy with 7.+ installed on a 506. The problem is he doesnt know how he did it. You have to wait, cisco gonna release version 7 to the smaller ones pretty soon.

And you will never get any clients to work except ciscos own in version 7. They removed the support for that. Maybe you already new that!?

My suggestion is to check at a product called appgate.
www.appgate.com]]> http://www.dslreports.com/forum/remark,14523214 Fri, 07 Oct 2005 05:39:46 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14520676 sdrock : buy a new one. it wont work and you will end up stuffing it totaly and then you wont have an old one or a new one. and if you try to log a tac case they will tell you to pi55 off.]]> http://www.dslreports.com/forum/remark,14520676 Thu, 06 Oct 2005 20:04:13 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14520660 sdrock : never]]> http://www.dslreports.com/forum/remark,14520660 Thu, 06 Oct 2005 20:01:46 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14425297 zeio77 : I'd everything under the sun to get a 506 with 6.3(5) (PDM erased) to upgrade to:

pix701.bin [ 7.0(1) ]
pix702.bin [ 7.0(2) ]

and

pix702-5.bin [7.0(2)-5 ]

I used clear flashfs, the 6.3 -> 7.0 Cisco instructions and the various hack recipes to try and get this thing to boot with PIX OS 7 , it will not.

I used the upgrade from 6.3(5), I used the upgrade from monitor mode, and neither worked. The file starts to load from flash but you never even see a "#" - its like the file header is not executable by the 506's monitor / boot loader.

We will have to wait and see if Crisco lets the 501/506 people squeak by and with how bad PIX OS is and how lame all the competitors are, its almost worth mucking around with OpenBSD at this point since these security/firewall/vpn boxes all suck in some way.

I want:

1) VPN LOCAL authentication - no directories, no crap, no ADS, no LDAP, no TACACS, nothing. I want to have vpn users live in the appliance
2) powerful implied application proxying. None of this crap where DCC doesn't work, idents don't work, AIM and Y! messenger file transfers don't work, etc. Winroute is an example of a "working application" - you don't need port forwards to get PASV ftp, DCC and idents to go through. (this is what is annoying about OpenBSD, they don't believe in proxying "broken" protocols)
3) simplistic access allow implied by port forwarding. Why port forward AND specify the allow for that, it should be implied. EG: "rdr pass on $ext_if proto tcp from any to 1.2.3.4 port 80 -> 10.10.10.10 port 8080
4) should facilitate: VPN over SSL (have a web page that sets ups a tunneled connection), support for OS X's client without software being installed, support plain-jane microsoft VPN clients (L2TP/IPSec, PPTP, Windows 2000, Windows XP and Windows 2003 and even Windows 98 as well as cooking instructions for Linux and FreeBSD clients as well as some possibility for Treos and other PPTP junk VPN stuff to work.)

If anyone knows a device that does this, or a pile of software with some cooking instructions let me know.
--
Some say time is the fire in which we burn. My time is running out.]]> http://www.dslreports.com/forum/remark,14425297 Fri, 23 Sep 2005 02:57:38 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14113335 anon : anyone tried to run 7.x on a 501 yet? I see reports of 506's just curious on a 501.]]> http://www.dslreports.com/forum/remark,14113335 Thu, 11 Aug 2005 17:56:34 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,14018296 anon : To get 7.0 to run on a 520 or FrankenPIX we need to upgrade the BIOS to 4.x. The only way I think this can be done is to copy a PIX-515 BIOS flash chip and burn it to the BIOS flash chip of the 520. Hence, we would need an EEPROM burner. The other possibility is to remove the BIOS flash chip from a non-functioning 515 and put it in a 520. Anyone up for it? ]]> http://www.dslreports.com/forum/remark,14018296 Sat, 30 Jul 2005 10:28:55 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13918624 adamc1 : Anyone know when Cisco will officially support FOS 7 on 506e.

I'm trying to be patient. :(]]> http://www.dslreports.com/forum/remark,13918624 Mon, 18 Jul 2005 00:45:52 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13905055 anon : If we can change the HW ID for PIX 520 like below

Hardware: PIX-506E, 96 MB RAM, CPU Pentium II 300 MHz
^^^^^^^^^^^
(replace 520 to 515 or 525)
and I think FOS 7.0 could be run on PIX520
I am looking for a BIOS hack tool to change the HW ID]]> http://www.dslreports.com/forum/remark,13905055 Sat, 16 Jul 2005 01:12:06 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13847142 grunteled :
said by NeTwOrKDawg See Profile:

Oops never mind.. that wasn't hard...
Would you mind sharing? I'm not going to make the switch till a couple more releases but I would like to know what the command is.]]> http://www.dslreports.com/forum/remark,13847142 Fri, 08 Jul 2005 22:28:40 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13844438 NeTwOrKDawg : Oops never mind.. that wasn't hard...

Cisco PIX Security Appliance Software Version 7.0(1)

Compiled on Thu 31-Mar-05 14:37 by builders
System image file is "flash:/image.bin"
Config file at boot was "startup-config"

pixfirewall up 1 min 16 secs

Hardware: PIX-506E, 64 MB RAM, CPU Pentium II 300 MHz
Flash E28F640J3 @ 0xfff00000, 8MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: Ext: Ethernet0 : media index 0: irq 10
1: Ext: Ethernet1 : media index 1: irq 11

Licensed features for this platform:
Maximum Physical Interfaces : 2
Maximum VLANs : 2
Inside Hosts : Unlimited
Failover : Not supported
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 0
GTP/GPRS : Disabled
VPN Peers : Unlimited

This platform does not support Failover.]]> http://www.dslreports.com/forum/remark,13844438 Fri, 08 Jul 2005 16:15:00 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13844286 NeTwOrKDawg : Can anyone tell me how to do:

3) Format the filesystem, delete all the files on it

I have tried clear flashfs and no flashfs .. can't get rid of the PDM files in flash so can't update to 7.01]]> http://www.dslreports.com/forum/remark,13844286 Fri, 08 Jul 2005 15:58:49 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13717549 anon : Hi,

I can't swear that it will work for you, because it's clearly *not* a supported configuration, so proceed at your own risk!

However PIX 7.0 will easily fit into 8Mb flash (the image is 5Mb so you have about 2.5Mb spare). On this principle I decided to give it a go for a laugh on a PIX that someone gave me.

By this principle it should be able to run on any of the older PIXs that support a memory upgrade past 64Mb. Given that most PIX techs worth their salt won't touch a GUI, I wonder why Cisco are so adamant that it won't work.

Warnings over, this is how to do it in very general terms.

1) Boot your pix *on the console* and login
2) Back up the FS to tftp
3) Format the filesystem, delete all the files on it
4) Reboot to monitor mode
5) tftp boot the Pix from an image (6.3, 7.0, makes no odds)
6) copy tftp://server/pix701.bin flash:image
7) reload
8) request a new 3DES activation key from Cisco (free).

Regards,

John]]> http://www.dslreports.com/forum/remark,13717549 Wed, 22 Jun 2005 06:43:07 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13712551 grunteled : Does that mean you can get it on the 506? I have the older 506 platform but it seems to be the same device just not 10/100 and no USB.

Hardware: PIX-506, 256 MB RAM, CPU Pentium 200 MHz
Flash i28F640J5 @ 0x300, 8MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB]]> http://www.dslreports.com/forum/remark,13712551 Tue, 21 Jun 2005 16:28:42 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13710696 anon : Hi,

It is possible to run 7.0 on a Pix 506E. You can't however install ADSM, only the CLI.

My account manager at Cisco tells me that they are planning on doing a compressed image with a bootloader that should fit both PIX 7 and ADSM into 8Mb. Since together they are only ~10Mb that sounds feasible.

The Pix 506E is of course not flash upgradeable (not unless you're a dab hand with surface mount soldering at least).

Regards,

John]]> http://www.dslreports.com/forum/remark,13710696 Tue, 21 Jun 2005 12:57:50 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13710665 anon : Hi,

I just thought I'd add my experiences:

pixfirewall> sh ver

Cisco PIX Security Appliance Software Version 7.0(1)

Compiled on Thu 31-Mar-05 14:37 by builders
System image file is "flash:/image"
Config file at boot was "startup-config"

pixfirewall up 35 secs

Hardware: PIX-506E, 96 MB RAM, CPU Pentium II 300 MHz
Flash E28F640J3 @ 0xfff00000, 8MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: Ext: Ethernet0 : media index 0: irq 10
1: Ext: Ethernet1 : media index 1: irq 11

Licensed features for this platform:
Maximum Physical Interfaces : 2
Maximum VLANs : 2
Inside Hosts : Unlimited
Failover : Not supported
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 0
GTP/GPRS : Disabled
VPN Peers : Unlimited

Regards,

John]]> http://www.dslreports.com/forum/remark,13710665 Tue, 21 Jun 2005 12:54:01 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13695474 grunteled : Cisco says no. I'd not put that image on if I were you.]]> http://www.dslreports.com/forum/remark,13695474 Sun, 19 Jun 2005 13:57:11 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13693413 cisco5350 : can my 501 support Version 7 .....
i have downloaded pix701.bin ....it is 4.88 MB
i have 8 MB Flash..
pls reply me quickly
thanx;)]]> http://www.dslreports.com/forum/remark,13693413 Sun, 19 Jun 2005 05:13:54 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648616 Jugaad : :D

Cisco PIX 515/515E Security Appliance Memory Upgrade for PIX Software v7.0

»www.cisco.com/en/US/products/hw/···8d4.html
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,13648616 Mon, 13 Jun 2005 17:01:45 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648585 Jugaad : :D

It's official now..earlier comments were posted when it was beta...

See this link and this should answer most of your questions:
»www.cisco.com/en/US/products/hw/···ae1.html
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,13648585 Mon, 13 Jun 2005 16:57:38 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648476 yaplej : I have two PIX515's that have 7.0 running on them with only 64MB of ram. I think that you will only need 128MB to use some features of 7.0 like active/active failover. Perhaps some other cool features too.]]> http://www.dslreports.com/forum/remark,13648476 Mon, 13 Jun 2005 16:46:54 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648383 pdoland : I just got a PIX 515E for a customer. Bought it from CDW. I'm not Cisco certified. (I know, I need to finish that...) Anyway, the unit I just got came with 64 meg RAM, and OS version 6.3. So, if my customer wanted to go with 7.0, I'd have to get more memory first. Somebody asked in this thread about getting memory for a 515e, and I found a number of third-party vendors that sell memory for it. So, here are my questions:

1. Is getting version 7 free? The unit is brand new.
2. How do I go about getting the upgrade, like what form or page to fill out?
3. Is it official yet? Some people in this thread seem to feel it is official release, others said it was still in beta.

Thanks.]]> http://www.dslreports.com/forum/remark,13648383 Mon, 13 Jun 2005 16:37:02 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648176 Jugaad : :uhh:

Reminds me of a saying >>

"Get ready to change....or get replaced"

Hehe..best of luck to u all
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,13648176 Mon, 13 Jun 2005 16:12:50 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13648054 Jugaad : :D

Everyone hates it when there are changes. I hated it too when PIX 7.0 came out. But, when I started working on it I starting liking it...n now I love it...

There is so much more I can do with it. And I have started liking the IOS like CLI too...Much easier to work with...Tabbed input etc...

I would suggest people to take the plunge into 7.x in near future... You won't regret it...But like all cutting edge stuff it needs to mature and smoothen out the bugs...as a thumb rule I deploy new line of code after atleast 6 months of it being out...enough time for people to find bugs and report to the manufacturer...
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,13648054 Mon, 13 Jun 2005 15:59:58 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13631680 grunteled :
said by Jugaad See Profile:

PIX CLI moving towards IOS sounds good to people who work mostly on IOS. But, for someone who works mostly on PIX, moving towards IOS is a big irritation. For years I looked at IOS and said thank god my PIX CLI is not like that.
It definitely is a router vs pix guy thing. I came from routers and got a PIX forced on me several years ago. Since then I've taken over the rest of them. While the commands were in places similar, I always felt a little out of place. I hate the 6.x command line help... especially on complex commands. I bang the tab key constantly to no avail on the PIX. I also hate the forced NAT and NAT exclusion between security levels on the interfaces. It complicates the config greatly where numerous interfaces are involved.

7.X is a whole new affair. I'm a little apprehensive because it is very different than 6.X in it's commands and structure. That's going to mean more reading for me. However command help is much improved IMO. Tab completion is nice and the ability to remove the forced NAT is VERY welcome in my environment. Our lab firewall is on 7.0.1 and so far I like it. It will be some time before we take it into production on our main firewall pair.

I agree with you though to a point. I'd rather have better security than a kitchen-sink of router and firewall and IDS in one box.]]> http://www.dslreports.com/forum/remark,13631680 Sat, 11 Jun 2005 03:16:58 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,13631628 grunteled :
said by webnetwiz See Profile:

Pix 520 will not be supported. Neither will the 501, 506, 506E (506E will be supported a little later with a memory upgrade), 515. All other Pixes, 515E, 525 and 535 will be supported.
So is the 506 going to be included when the 506E gets there? I have 256M on my 506 and I'd like to take it to 7.x if possible. If not 6.3 is pretty good too. I was pretty excited to finally be able to use VLANs on the 506. Pretty powerful firewall for my home use :)]]> http://www.dslreports.com/forum/remark,13631628 Sat, 11 Jun 2005 03:01:04 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13413628 yash0 : good & bad news:

1) your trick worked like a charm. put a genuine pdm file
on tftp server, do "copy tftp", pull the network cable
mid-transfer, and reboot: pdm is history.
Very cool indeed! ;-)

2) after this there was enough flash mem available and
we were able to install the pix701 image and reboot.

3) but: after installing the image, it wouldn't boot :-(
it would start the boot sequence, and reset itself,
in an endless loop.

It seems that Cisco was serious about not supporting 7.0
on the 520...

Thanks anyway! ]]> http://www.dslreports.com/forum/remark,13413628 Sun, 15 May 2005 16:03:17 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13389934 yaplej : So why the change in heart? Iv been running 7.0 on a pair of 515-UR's with 64MB of ram. I haven't tried anything extremely resource intensive because they are just in my lab, but 7.0 will run on a 515-UR with 64MB in case someone was wondering :)]]> http://www.dslreports.com/forum/remark,13389934 Thu, 12 May 2005 10:18:02 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13388357 Jugaad : :D

BTW

I love the new PIX OS 7 now. ]]> http://www.dslreports.com/forum/remark,13388357 Thu, 12 May 2005 01:29:36 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13388352 Jugaad : :D

1 way to get rid of PDM is this

copy PDM file to TFTP server

issue copy tftp flash:pdm on pix

PIX will check and see that there is a valid PDM file on TFTP server. it will say 'erasing current PDM file..'

It will now start pulling PDM file from TFTP server. Just shut down the TFTP server at this point or pull the ethernet cable (before the PDM download completes)

TFTP will now time out and PIX do 'erasing partial PDM file...'

Net result is that PDM is no more on the PIX.

Just reload the PIX once before you start your experiment ;-)
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,13388352 Thu, 12 May 2005 01:28:21 EDT Re: Cisco PIX OS 7.0 on PIX 520?? http://www.dslreports.com/forum/remark,13375442 yash0 : I know that Cisco Docs say 520 will not
be supported with 7.0. However, my 520
has 16MB Flash and 128MB RAM which seems
to be enough by the specs.

I tried to upgrade using tftp, and the process
starts OK but dies half-way through and complains
that it doesn't have enough memory. Tried to do it
from monitor mode (boot with floppy) with same results.
So I'm wondering if maybe it CAN be made to work??

Unfortunately I have the PDM for 6.3 installed in the
flash mem too (I never use it) and that eats up
a few MB. It seems that there isn't enough flash left for
the 5MB of pix7.0 to co-exist with 6.3 & pdm while
the upgrade is in progress.

Questions:
1) does anyone know how to get rid of the PDM and free
up the flash? We tried various things with the "flashfs"
command, and with "downgrade" in monitor mode, but
after a power cycle the flash seems to be restored.
I don't mind erasing everything on this box, so feel
free to suggest any aggressive idea that could help
2) do you think that adding more flash memory will help
(assuming I can get flash for this box)?

TIA,
yash]]> http://www.dslreports.com/forum/remark,13375442 Tue, 10 May 2005 15:11:48 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12987115 Jugaad : :D

It's not released for public yet. However, if you want it, then enroll as a beta tester then maybe you'll get it. It should be out publically in one or two months.

word of advice...don't think of going to production with it when it's out. new releases have a lot of bugs. Best would be to wait it out for a few months and let the software mature...
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,12987115 Wed, 23 Mar 2005 19:23:34 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12972507 csbadboyz : TechManDude, said it all. Unfortunately Cisco, told me to stay away from the PDM, as it was buggy, and messed up my config. So I only us the PDM to monitor. CLI is easier to use after you get familiar with the structure.
--
VoIP on FWD & Lingo ]]> http://www.dslreports.com/forum/remark,12972507 Tue, 22 Mar 2005 08:49:59 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12972185 Batman0077 : Hi, could someone please tell where abouts on the cisco website you found OS 7.0 for download. I do have a CCo login, or if you someone could email me the files.
Thank you in advance]]> http://www.dslreports.com/forum/remark,12972185 Tue, 22 Mar 2005 07:19:49 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12954796 Jugaad : PIX CLI moving towards IOS sounds good to people who work mostly on IOS. But, for someone who works mostly on PIX, moving towards IOS is a big irritation. For years I looked at IOS and said thank god my PIX CLI is not like that.

But, majority of Cisco products users are IOS users and so PIX admins won't have a say here. Because the majority assumes that everyone loves IOS integration.

Regarding ASDM, it is an offshoot of the PDM. How many serious users used PDM to configure the PIX? It was mostly used for monitoring the PIX. But with the complicated IOS code introduced in PIX 7, there is no option other than to move towards GUI initially.

Yes, ADSM feels a lil better than the PDM, but it is a GUI and GUI would never be able to give a feeling of complete security, except for someone who uses stuff like zone alarm or checkpoint.

There is something beautiful about the PIX and it's simple CLI that helps enforce security just like you want it. The OS 7's new complicated structure somehow takes away what I like the best about PIX.

So, I am doing some self hypnosis right now --- "....I like PIX OS 7...I like PIX OS 7...."
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,12954796 Sun, 20 Mar 2005 01:19:09 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12945098 webnetwiz : Not to be mean or to put down others, but other than a VPN concentrator product line, which was obtained by Cisco when they ate up Altiga, every Cisco device is easier to configure via command line. In the Pix, my access list is 4 lines, and I'm hosting a server that runs a bunch of things. The reason that the access list is so short is because I use object groups. I did not find a way to do that through PDM, and it would've taken me way longer to do that than use command line's intuitive and never failing helper, the "?".

In regards to PIX OS turning more like the IOS, that is just inevitability. Cisco has moved passed CatOS (which in my opinion is the greatest OS for switches, and I wish they'd keep it, but....) to Hybrid IOS (the one using vlan database command to configure Layer 2 portion), then to Native IOS, like they run on 6500s with Sup720s.

The Goal is to eventually just have flavours for different devices, but the core set of commands to be the same, that way it's easier for Cisco to manage it and maintain it.]]> http://www.dslreports.com/forum/remark,12945098 Fri, 18 Mar 2005 19:23:51 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12944487 yaplej : When is 7.0 due to be released anyway?]]> http://www.dslreports.com/forum/remark,12944487 Fri, 18 Mar 2005 18:13:03 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12942668 idolclub :
said by lestat99 See Profile:

If you are having trouble with the CLI why don't you just use the GUI? The latest GUI is very user friendly and even has configuration "wizards" for setting up features such as VPN access.
Does the new GUI(PDM 5.0) can support range Port Forwarding? In the PIX 6.3, if I want to forward TCP port 1400-1420 to one internal IP, I must to write 20 ACLs.]]> http://www.dslreports.com/forum/remark,12942668 Fri, 18 Mar 2005 14:44:39 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12942412 lestat99 : If you are having trouble with the CLI why don't you just use the GUI? The latest GUI is very user friendly and even has configuration "wizards" for setting up features such as VPN access.]]> http://www.dslreports.com/forum/remark,12942412 Fri, 18 Mar 2005 14:09:21 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12941921 yaplej : So consistency within Cisco product lines is a bad thing?]]> http://www.dslreports.com/forum/remark,12941921 Fri, 18 Mar 2005 13:07:39 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12941809 tomkb :
said by Jugaad See Profile:

I didn't like the PIX OS 7. It turned the PIX into a router. None of the older commands work. PIX admins thinking of going to PIX OS 7 will have to unlearn all you have learned over the years and start fresh.

But, I guess with time I'll have to start liking the new OS. Change is inevitable.
New skills keeps the money rolling in.]]> http://www.dslreports.com/forum/remark,12941809 Fri, 18 Mar 2005 12:55:51 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12941616 Jugaad : I didn't like the PIX OS 7. It turned the PIX into a router. None of the older commands work. PIX admins thinking of going to PIX OS 7 will have to unlearn all you have learned over the years and start fresh.

But, I guess with time I'll have to start liking the new OS. Change is inevitable.
--
Not able to get online? Good!! Go out and meet friends ;-)]]> http://www.dslreports.com/forum/remark,12941616 Fri, 18 Mar 2005 12:31:44 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12939243 webnetwiz : I'm going to assume that what would happen with 506E is that the OS will be zipped, or packaged if you will, and since you'll be required to upgrade memory, the OS will be extracted to RAM and will run from RAM. I believe that also may be the reason why 506E will be supported later than the overall release of 7.0 to customers.]]> http://www.dslreports.com/forum/remark,12939243 Fri, 18 Mar 2005 02:03:04 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12939123 idolclub :
said by webnetwiz See Profile:

Pix 520 will not be supported. Neither will the 501, 506, 506E (506E will be supported a little later with a memory upgrade), 515. All other Pixes, 515E, 525 and 535 will be supported.
PIX506E only has 8MB flash, is PIX7.0 can install in 8MB flash?]]> http://www.dslreports.com/forum/remark,12939123 Fri, 18 Mar 2005 01:33:44 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12935421 yaplej : Has anyone found the 128 memory upgrade for the PIX 515? I haven't found it for sale through CDW yet. Iv got two that will need the memory. Im hoping its not so over priced that Ill need to take out a small loan to purchase the memory. Why am I even hoping? This is Cisco equipment. Memory is always WAY overpriced.

Looks like 7.0 does have some really cool features I really like the inclusion of active/active options.]]> http://www.dslreports.com/forum/remark,12935421 Thu, 17 Mar 2005 17:20:04 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12935282 webnetwiz : Pix 520 will not be supported. Neither will the 501, 506, 506E (506E will be supported a little later with a memory upgrade), 515. All other Pixes, 515E, 525 and 535 will be supported.]]> http://www.dslreports.com/forum/remark,12935282 Thu, 17 Mar 2005 16:56:31 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12931257 bsddaemon : It is not released yet to be tested]]> http://www.dslreports.com/forum/remark,12931257 Thu, 17 Mar 2005 01:46:03 EDT Re: Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12926865 kub326 : I'd like to know if it will run on a PIX 520. I know that the 520 has been EOL'd, but it does meet the memory requirements.]]> http://www.dslreports.com/forum/remark,12926865 Wed, 16 Mar 2005 16:48:52 EDT Cisco PIX OS 7.0 http://www.dslreports.com/forum/remark,12923133 idolclub : The new Cisco PIX OS 7.0 has many new features, include IM/P2P blocking, IPv6 Networking, QoS Services, Time-Based ACLs, Layer 2 Transparent Firewall....At the same time, the PDM also upgrade to v5.0. But the new PIX7.0 & PDM 5.0 only support PIX515E or above, need 16MB Flash & mini 128MB Ram. My PIX506E only has 8MB Flash, can't upgrade. Anyone has test it?

»www.cisco.com/en/US/products/hw/···dex.html
»www.cisco.com/en/US/products/hw/···ae1.html]]> http://www.dslreports.com/forum/remark,12923133 Wed, 16 Mar 2005 08:51:04 EDT