in new pix code 6.0 the PIX Firewall can be a HTTP server

[yv]

If i understood this correctly from cisco documentation, pix can be accessed remotely via http as a part of new pdm feature.

Isn't it, http, unsecure? How can i secure that connection? any thoughts?

[mfistler]

I was also a little concerned after browsing the 6.0 documentation. So I decided install the PDM (PIX Device Manager) on a set of 515's in the lab. It turns out that you use a secure HTTPS connection to connect to the PIX. You also have to tell the PIX what the IP address is of the inside station wanting to access the PIX via HTTPS. The HTTPS sessioin can either use the free DES key, or you can buy 3DES encryption for this connection.

Michael Fistler

Cisco CCIE #4503

[yv]

Michael,

thanks. I am assuming that username/passwords are set up on PDM side, right? Since configs for http on pix do not offer any syntax like that.

what about using vpn to do http to the pix? is that alternative to https?

thanks

yury

[0sgruttadauria]

The server is accessed using https