topic PIX 501 and DES, 3DES, AES in Network Security

PIX 501 and DES, 3DES, AES

otnj2ee — Fri, 21 Feb 2020 08:29:53 GMT

For a newly release product PIX 501,

1)Are DES, 3DES, and AES activation keys all pre-installed with?

2) How can I find out which one of them is pre-installed on my PIX 501?

3) When I create a VPN server (on the PIX 501), I can see all three DES, 3DES and AES are available in the PDM configuration screen 's dropdown box. Does this mean my PIX 501 have all three of them (DES, 3DES, and AES)? --If answer is NO. Assume only the DES is pre-installed on PIX 501, then why/how can the 3DES and AES appear in the dropdown box?

Thanks to help.

Scott

Re: PIX 501 and DES, 3DES, AES

jdepies — Tue, 01 Nov 2005 02:25:39 GMT

do a: show ver

that will tell you if the 3des-aes is enabled on your box.

I can't tell you about PDM, never used it personally.

Jeff

Re: PIX 501 and DES, 3DES, AES

Patrick Iseli — Tue, 01 Nov 2005 02:28:23 GMT

Should be allready built-in. Depends on how new is your PIX 501.

To be sure connect yourself on the console and type:

show version

Show version example output:

pixfirewall(config)# show version

Cisco PIX Firewall Version 6.2(3)

Cisco PIX Device Manager Version 2.0(1)

Compiled on Wed 17-Apr-02 21:18 by morlee

pixdoc515 up 9 days 3 hours

Hardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHz

Flash i28F640J5 @ 0x300, 16MB

BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 0050.54ff.3772, irq 10

1: ethernet1: address is 0050.54ff.3773, irq 7

2: ethernet2: address is 00d0.b792.409d, irq 11

Licensed Features:

Failover: Enabled

VPN-DES: Enabled

VPN-3DES: Enabled

Maximum Interfaces: 6

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: Unlimited

Throughput: Unlimited

IKE peers: Unlimited

Serial Number: 480221353 (0x1c9f98a9)

Running Activation Key: 0x36df4255 0x246dc5fc 0x39d2ec4d 0x09f6288f

Configuration last modified by enable_15 at 12:15:28.311 UTC Wed May 1 2002

pixfirewall(config)#

Here you should see if DES or 3DES,AES encryption is Enables or not. If you have is just DES then you can use the following link and obtain for Free a new activation key that enables 3DES and AES.

https://tools.cisco.com/SWIFT/Licensing/jsp/formGenerator/Pix3DesMsgDisplay.jsp

sincerely

Patrick