topic Re: How can I check if the Cisco PIX Firewall VAC+ is installed in Network Security

How can I check if the Cisco PIX Firewall VAC+ is installed in a chassis

skelian — Fri, 21 Feb 2020 08:07:29 GMT

I know that I have to issue the SH VER command but can anyone tell me what I have to look for in the SH ver command?

Thank you,

Re: How can I check if the Cisco PIX Firewall VAC+ is installed

Patrick Iseli — Wed, 04 May 2005 16:32:40 GMT

Do a " show version " and " show crypto engine verify ".

See Q&A of the VAC card:

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_qanda_item09186a0080148723.shtml

sincerely

Patrick

Re: How can I check if the Cisco PIX Firewall VAC+ is installed

skelian — Wed, 04 May 2005 18:01:12 GMT

Hi patrick,

This is what i get when i do the show commands

Can you tell me what to look for?

Thank you

show crypto engine verify

FIPS: Known Answer Test begin

FIPS: software DES success

FIPS: software 3DES success

FIPS: software AES success

FIPS: software SHA success

FIPS: software RSA success

FIPS: software to software DES/SHA1 tunnel check success.

FIPS: software to software 3DES/SHA1 tunnel check success.

FIPS: software to software AES128/SHA1 tunnel check success.

FIPS: software to software AES192/SHA1 tunnel check success.

FIPS: software to software AES256/SHA1 tunnel check success.

FIPS: Known Answer Test finish

sh ver

Cisco PIX Firewall Version 6.3(4)

Cisco PIX Device Manager Version 1.1(2)

Compiled on Fri 02-Jul-04 00:07 by morlee

MOC-GEN-PIX-01 up 146 days 8 hours

Hardware: PIX-515E, 32 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0x300, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: ethernet0: address is 000c.ce32.d0e6, irq 10

1: ethernet1: address is 000c.ce32.d0e7, irq 11

2: ethernet2: address is 0002.b3cb.e18c, irq 11

Licensed Features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES-AES: Enabled

Maximum Physical Interfaces: 3

Maximum Interfaces: 5

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: Unlimited

Throughput: Unlimited

IKE peers: Unlimited

This PIX has a Restricted (R) license.

Thank you,

Re: How can I check if the Cisco PIX Firewall VAC+ is installed

jayson.talaga — Tue, 17 May 2005 12:42:14 GMT

The following example shows sample output for the show crypto engine command when output is specified for a VAC or a VAC+:

VAC+:

pixfirewall# show crypto interface

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)

VAC:

pixfirewall# show crypto interface

Encryption hardware device : VAC (IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5)

Re: How can I check if the Cisco PIX Firewall VAC+ is installed

mike.driest — Tue, 17 May 2005 13:59:10 GMT

When I issued a SH VER command on our PIX-515E firewall this is one of the items in the list:

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)

This line was located below the Hardware, Flash, and BIOS Flash entries.