topic Re: PDM or CLI in Network Security

PDM or CLI

yogi_ccse786 — Mon, 11 Mar 2019 08:59:50 GMT

Hi Folks,

which is best to use on PIX. PDM or CLI.

does PDM provides all options that CLI provides?

Thanks & reg.

Yogi

Re: PDM or CLI

m.sir — Thu, 23 Nov 2006 18:11:15 GMT

For configuring i prefere CLI you have better control over firewall... you need better understand what every command means... Especially when configuring VPNs or ACLS - PDM adds lot of confusing and useless lines to configuration

check following links for comparsion and for Supported and Unsupported Commands

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pdm/v_11/pdmig/pdm_app.htm

But I think PDM is better for monitoring you can use various graphical charts...

Hope that helps rate if it does

Re: PDM or CLI

a.kiprawih — Thu, 23 Nov 2006 23:36:46 GMT

I think CLI provides more options than PDM/GUI.

If you're new to PIX, PDM is probably the best as it simplify lots of configuration and monitoring tasks. Most important is that you do not have to know what CLI equavalent to PDM options as there're a lot of commands you need to know and understand how to use it (syntax combination). PDM also gives you graphical stats that is easy for you to understand.

But on the other hand, some (CLI-exposed) would prefer CLI as it gives you flexibility, especialy on command options. PDM is good as it gives you visibility on PIX status via the graphs.

Combination of both knowledge will be the best.

HTH

Re: PDM or CLI

desai.jaideep — Fri, 24 Nov 2006 10:09:39 GMT

That will purely depend on the level of config. u are seeking.

PDM can do a basic setup with basic VPN access.There are options for ACLs and AAAs.

But for more flexibility, u need the CLI anyway.

Regards

Re: PDM or CLI

e.beck — Mon, 22 Jan 2007 22:17:58 GMT

If you currently have a PIX 501 w/ PDM installed, how do you remove it? I have 16 MB RAM and 8MB Flash w/ 6.3(5). When I try to tftp 7.2(1) or 7.2(2) to it, I get an out of memory error.

WEB

Re: PDM or CLI

scheikhnajib — Fri, 26 Jan 2007 16:27:36 GMT

Mate,

I only use the ASDM/PDM for some monitoring tasks but as everyone said, CLI gives you more control and understanding of the PIX/ASA config architecture.

And e.bek, PIX OS 7.0 is not supported on 501'2 so don't waste your time mate.

Cheers.

Re: PDM or CLI

jwalker — Fri, 26 Jan 2007 17:35:51 GMT

The new Branch office firewall from Cisco is the ASA5505. The PIX 501 can only be upraded to v6.3(5) because they do not have enough memory for 7.X and the memory cannot be upgraded. If you want the 7.X functionality, then check into the ASA5505.

Jay