According to unofficial Cisco resources, the PDM2.0 will be available in CCO beginning May .

NO,the option 'secondary' does no exist in the pix, only one IP address is allowed per interface;the 'sub-interface' does no exist, either.

You should add the commands :aaa-server group_tag protocol auth_protocolaaa-server group_tag (if_name) host server_ip key timeout secondsSee the URL http://www.cisco.com/warp/public/110/pixcryaaa52.shtml

Hi,"%PIX-3-210007: LU allocate xlate failedExplanation Stateful Failover failed to allocate an translation slot (xlate) record.Action Check the available memory using the show mem command to make sure the PIX Firewall has free memory in the system...

Hi,"%PIX-3-210007: LU allocate xlate failedExplanation Stateful Failover failed to allocate an translation slot (xlate) record.Action Check the available memory using the show mem command to make sure the PIX Firewall has free memory in the system...