<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Secure PIX config in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/secure-pix-config/m-p/313487#M559975</link>
    <description>&lt;P&gt;Anyone know location of any guidelines/best practices on configuring a PIX securely, i.e. changing default telnet account, disabling unused interfaces etc?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Many thanks&lt;/P&gt;</description>
    <pubDate>Fri, 21 Feb 2020 07:39:36 GMT</pubDate>
    <dc:creator>g.leonard</dc:creator>
    <dc:date>2020-02-21T07:39:36Z</dc:date>
    <item>
      <title>Secure PIX config</title>
      <link>https://community.cisco.com/t5/network-security/secure-pix-config/m-p/313487#M559975</link>
      <description>&lt;P&gt;Anyone know location of any guidelines/best practices on configuring a PIX securely, i.e. changing default telnet account, disabling unused interfaces etc?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Many thanks&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 07:39:36 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/secure-pix-config/m-p/313487#M559975</guid>
      <dc:creator>g.leonard</dc:creator>
      <dc:date>2020-02-21T07:39:36Z</dc:date>
    </item>
    <item>
      <title>Re: Secure PIX config</title>
      <link>https://community.cisco.com/t5/network-security/secure-pix-config/m-p/313488#M559977</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Some guidelines:&lt;/P&gt;&lt;P&gt;- Restrict access to ssh and pdm (https) on inside interface.&lt;/P&gt;&lt;P&gt;- Remove access to telnet access and snmp if possible.&lt;/P&gt;&lt;P&gt;- Enable spoofing&lt;/P&gt;&lt;P&gt;- Enable needed fixups&lt;/P&gt;&lt;P&gt;- Create a smart access-list that refelcts your security policy.&lt;/P&gt;&lt;P&gt;- take care what incomming protocols you allow into your DMZ.&lt;/P&gt;&lt;P&gt;- Enable authentication if possible.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;See this links:  &lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&amp;amp;s=Software_Configuration" target="_blank"&gt;http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&amp;amp;s=Software_Configuration&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://www.sans.org/rr/" target="_blank"&gt;http://www.sans.org/rr/&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://www.secwiz.com/" target="_blank"&gt;http://www.secwiz.com/&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;sincerely&lt;/P&gt;&lt;P&gt;Patrick&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 30 Sep 2004 13:26:52 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/secure-pix-config/m-p/313488#M559977</guid>
      <dc:creator>Patrick Iseli</dc:creator>
      <dc:date>2004-09-30T13:26:52Z</dc:date>
    </item>
  </channel>
</rss>

