access pix using pdm

y.lo — Fri, 21 Feb 2020 07:45:41 GMT

After using pdm to access pix, there are a lot of strange commands 'pdm location x.x.x.x x.x.x.x' generated in the configuration. Can I prevent them from being generated? This makes the config a little bit messy.

Re: access pix using pdm

jmia — Mon, 22 Nov 2004 08:15:26 GMT

To answer your question on why PDM generates : "pdm location x.x.x.x x.x.x.x, here is an explanation from Cisco TAC:

A PDM location is a pure book keeping command used by PDM to build its topology database.

It has nothing to do with the PIX's functionalities. In particular, it does

**NOT** control which host can access PDM which is a common

misunderstanding.

The control is done by the command "http ".

Why do we need it?

In PDM's world, policy (those rules) is built on top of topology.

Ideally user creates the topology first via the Host/Network tab, then

configures policy else where (like Access Rule tab). A network object

exists by itself, even if there is no policy configured directly on it

at a particular time. We use "pdm location" command to remember the

location of a network object.

I hope this helps and please rate this post if it answers your question as others might be looking for the same answer on PDM locations.

Jay

topic access pix using pdm in Network Security

access pix using pdm

Re: access pix using pdm