Secure PIX config

[g.leonard]

Anyone know location of any guidelines/best practices on configuring a PIX securely, i.e. changing default telnet account, disabling unused interfaces etc?

Many thanks

[Patrick Iseli]

Some guidelines:

- Restrict access to ssh and pdm (https) on inside interface.

- Remove access to telnet access and snmp if possible.

- Enable spoofing

- Enable needed fixups

- Create a smart access-list that refelcts your security policy.

- take care what incomming protocols you allow into your DMZ.

- Enable authentication if possible.

See this links:

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&s=Software_Configuration

http://www.sans.org/rr/

http://www.secwiz.com/

sincerely

Patrick