I have never seen a comparison test of the IOS Firewall features and the PIX. Both should be equally safe, if you know what you are doing...There are probably a number of differences, i.e.:- The PIX has its ASA. This allows all outgoing traffic from ...
Using Steve Gibsons very basic and very limited Shields Up! tool to test your dedicated firewall, is not a good thing. If Shield Up! should find anything at all, when comparing IOS and PIX, then there is something wrong with the person configuring th...
If all your customers only receive email through your email servers and are only using pop/imap to fetch the email, then you should be able to filter traffic sent to 25/tcp of your customer blocks, but...If some of your customers use their own email ...
You should probably set:X11Forwarding noor just comment it:#X11Forwarding noin your /etc/ssh/ssh_config file. Cisco SSH implementation do not support X11 forwarding, since no X11 is implemented. This is not an OpenSSH default setting you are using, s...
That is correct.Remember to save the newly created keys tp flash, or they will only exist in memory:ca save allAlso remember that the hostname and domainname are inputs to the key creation. If you change them after creating the keys, the next time yo...