Pix 525 best practices

[pgroisman]

Hi, does anyone know of a resource to test a PIX 525 config? I want to make sure its utilizing cisco's best practices in configuration

[drolemc]

The simplest test is to try and access denied resources and see if access is refused. Not too scalable but the only way I know. To test the mailguard feature, you could refer to the document at http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800b2ecb.shtml. I am not aware if a document with best practices for PIX exists as such. However, a number of configuration examples exist on the PIX support page which should give you a good idea of what a good config should look like (http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&viewall=true).