VPN / PIX Management

[dschumann]

Some advice required.

I have been asked to develop a plan for managing our VPN environment. Unfortunaly experience is limited and I would appreciate some feedback as to what others are doing in similiar situations.

We have approx. 100 remote sites with PIX501 firewalls, connecting back home via a secure tunnel. What is the best approach to managing these sites?

[jackko]

just wondering whether the objective is to monitor the status or deploying configuration modification and updates.

for monitoring purpose only, a snmp server is all required.

for a complete management solution, cisco has a product called ciscoworks vpn/security management solution (vms).

http://www.cisco.com/en/US/products/sw/cscowork/ps2330/index.html

may i suggest that if you are interested in the vms, it would be better if you can wait for couple more months as a new product namely security manager will be released. this product is going to replace vms eventually.