Newbie PIX question

[morganstanleylau]

Hi all,

I have some question about the 515E PIX as below:

1.PDM is it not support by access-list ? because when i set the access-list in terminal console , so that i refresh the PDM can't find the rule , is it true?

2.What different between access-list and conduit ? because i just know that the access-list is not support before 5.x version , also i find that many people to config their PIX using access-list , so what can i choice ?

[plemieux72]

1. Are you applying the access-list you created to an interface? I created my access-lists in the console as well and then when I display them in PDM, they show up. I am not sure what else might be wrong...

2. Access-lists have replaced conduits. You can still use conduits but they are only there for backward compatibility. Also, PIX access-lists have the same functionality as IOS access-lists so if you learn them for the PIX, you will also be able to use them for routers running IOS.

[morganstanleylau]

Hi plemieux72,

When i in console mode can see the access-list rule , but try to PDM don't see , eg.

access-list 101 line 1 deny tcp any any eq 11111

access-list 101 line 2 deny tcp any any eq 11112

is that any problem? or need to upgrade my PDM or PIX verison?

since my PDM is 3.0(1) and PIX 6.3(3) , thx