Here a few tips that should help you out:
Reserve some network addresses for statics. Don’t put all your addresses in the global pool. It makes it easier to administer later.
Turn on Port Address Translation (PAT). Add another global one with just a single address for PAT. When you run out of addresses in your global pool, PAT will takeover and allow basic web, ftp, mail, etc. functionality. Even if you think you have enough addresses now, just turn it on in case your company grows.
Keep it as tight as possible. Any time you open conduits through the firewall, you are opening up vulnerabilities to the network.
Hard set your interface speed. Auto detect can cause problems with some routers and switches.
Use the latest “General Deployment” PIX code. Avoid “Early Deployment” unless you have to have a feature in that particular code. On the download site, these are listed as GD and ED. I am a strong believer in “if it’s not broken, don’t fix it.” Don’t just upgrade code without having a specific reason to do so.
Hope this helps…Did I miss any?
