topic Re: PDM and PIX in Network Security

PDM and PIX

karl.jones — Fri, 21 Feb 2020 06:30:12 GMT

Is it possible to manage a PIX or VPN concentrator from a management station like the PDM. If so, if a hacker broke in to the PIX from outside, I would like for them to be unable to modify the PIX or VPN concentrator configuration, as this would be disabled because it is managed from the management station. This way the config couldnt be modified to allow further attacks on the network.

Is this possible

Regards

Karl

Re: PDM and PIX

gfullage — Mon, 20 Jan 2003 03:34:19 GMT

In the PIX you have to specify what IP addresses or subnets have PDM access with the "http" command. See http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/gl.htm#1029823

For the VPN3000 concentrator, you can also limit what IP addresses have GUI access under the Administration - Access Rights - Access Control List menu.

Re: PDM and PIX

karl.jones — Mon, 20 Jan 2003 19:10:43 GMT

Hi Glenn

Thanks for your reply

I tried this but it didnt work, do I connect on port 80 or something else.

I entered:-

config)#http 10.0.0.30 255.255.255.255 inside

config)#http server enable

10.0.0.30 is the ip addss of client that wishes to connect to the browser.

Am i missing anything?

Regards

Re: PDM and PIX

tvanginneken — Mon, 20 Jan 2003 23:10:32 GMT

Hi,

is DES or 3DES enabled on the firewall? At least DES is required to make the PDM work.

You can register for a free 56bit DES license at this URL:

https://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=324

Kind Regards,

Tom

Re: PDM and PIX

karl.jones — Tue, 21 Jan 2003 10:10:32 GMT

Hi Tom

This is what I get with a show ver

Licensed Features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES: Disabled

Does this mean I am ok

Best regards

Karl Jones

Re: PDM and PIX

tvanginneken — Tue, 21 Jan 2003 10:14:40 GMT

Hi,

should be OK.

Please have a look at this URL for more PDM troubleshooting:

http://www.cisco.com/warp/public/110/pdm_http404.shtml

Kind Regards,

Tom

Re: PDM and PIX

ali-franks — Thu, 23 Jan 2003 14:32:52 GMT

Karl,

try :

pdm location 10.0.0.30 255.255.255.255 inside

In 6.2.2 if you type PDM ? this command is not shown but you need it. The only mention of the PDM location is when clearing.

HTH

Ali

Re: PDM and PIX

kagodfrey — Thu, 23 Jan 2003 23:23:25 GMT

Have you tried using https to connect rather than http?

HTH

Kev

Re: PDM and PIX

karl.jones — Fri, 24 Jan 2003 09:13:47 GMT

Hi Guys

I have managed to get this working now

Thanks for your assistance

Regards