Cisco 5510 ASA Firewalls

[cribster_vertan]

Hey,

A few questions if I may:

Are there any tools/free techniques to identify unneccesary rules/open ports (stale rules) we call them on a cisco 5510 ASA?

Ports open that are never / have never been used?

Is there any general best practice configuration tool that can be run across such a device to ensure its configured to best practice?

And finally are there any default passwords associated with such devices?

Thanks

[varrao]

Hi,

To clear the configuration of unnnecessary rules/translations, we do not have any tools, unfortunately that needs to be done manually by the user.At most what you can do is to run "show access-list" on ASA and chcek if there are any rules on which you don't have any hitcount for a long time or any network ACL which does not exist anymore.

Secondly, for ASA, here are the factory default password:

username - pix

Password - cisco

Enable mode password is blank, just hit enter for it.

Hope this helps.

Thanks,

Varun