Telnet from PIX

[rmv72]

I was very suprised to find that i can't use telnet command from PIX device? Why this functionality is absent?

[scoclayton]

Why would the functionality be there? Wouldn't it seem ironic to be launching an easily snooped, clear-text connection to another device on your network from your "security device"?

Scott

[simonrak2]

OK, I'll bite:

1. Because it's convenient to be able to probe tcp ports and grab banners, etc.

2. If security is the reason, why not SSH then?

3. Because sometimes telnet is OK. Wouldn't it make sense to let the user (firewall admin in this case) make that decision?

Simon

[Solace]

More lines of code = less secure code

:)

[pcomeaux]

I submitted an enhancement request to the Pix team for a customer maybe a year ago for this feature(telnet from pix), along with traceroute and scheduled reloads.

Only scheduled reloads appear to make it in the next major release. This is most likely due to the reasons the others have mentioned.

peter