RE: [fw-wiz] PIX Licensed Connections Limit

From: Sloane, David (DSloane@vfa.com)
Date: 04/18/03

  • Next message: Mike Hoskins: "Re: [fw-wiz] Managed Firewall Service - Opinions"
    From: "Sloane, David" <DSloane@vfa.com>
    To: firewall-wizards@honor.icsalabs.com
    Date: Fri, 18 Apr 2003 14:13:26 -0400
    

    Alan,

    I would try a VAR/Integrator instead of Cisco itself. You'll still have a
    substantial fee, but these guys are better (for you) in three ways:

    1. They need your money more than Cisco does.

    2. They have a relationship with Cisco.

    3. They may have indirect distribution channels to server your
    software/licensing needs.

    Try the Cisco Partner Locator for local/regional/etc. vendors.
    http://tools.cisco.com/WWChannels/LOCATR/jsp/partner_locator.jsp

    Good luck.

    -David Sloane

    -----Original Message-----
    From: Duncan Sharp [mailto:drsharp@pacbell.net]
    Sent: Thursday, April 17, 2003 8:03 PM
    To: firewall-wizards@honor.icsalabs.com
    Subject: Re: [fw-wiz] PIX Licensed Connections Limit

    "Alan R. Young" wrote:

    > Hi
    >
    > Now I am completely stumped!! CISCO has thrown me for a loop.
    >
    > I just called CISCO customer support and they told me that they will not
    > sell me anything until I can get my box inspected and licensed and I
    > must buy a smartnet contract.
    >
    > They told me it would be around $3000, that is going to cost me about
    > three times the price of the box. They really do go for the throat.
    >

        That may explain why some offer a PIX 520 with OS 6.2 and (4) NICs for
    $2800.

    >
    > Then I asked for a product number so I could call back once I had the
    > money to pay for the CD, and upon inquiring further the CISCO guy on the
    > line told me that no, upon further checking they cannot sell me
    > anything, the software is now discontinued !!, NO SUPPORT AVAILABLE FOR
    > MY PIX 520!!! The phrase the guy used was "it is at END OF LIFE STATUS".
    >

    To clarify this misinformation:

    The PIX 520 will still be software supported through June 23, 2004 and
        hardware support through June 23, 2006 (~four more years).

        The minimum supported OS for PIX is 5.2 ,
        but this requires 16MB flash in a PIX 520 ( also 515 ).

        To enable more than 1k concurrent connections requires a new license
    key.
        You will also need to purchase a software upgrade from 1k to UR
        concurrent sessions. I don't know what the Product number would be
    anymore.
        This could be REAL expensive, since the retail cost difference between
        a PIX 520 -1k and -UR was $4,000.

    >
    > Am I totally screwed? Is there a third party source that sells the
    > upgrade license software?
    >
    > I am completely stunned... Did I buy a useless paperweight?

    >
    >
    > Any suggestions guys?

    >

    Yours,
    Duncan

    >
    >
    > Alan
    >
    > -----Original Message-----
    > From: Dave Rinker [mailto:firewall@dsrtech.com]
    > Sent: Wednesday, April 16, 2003 6:19 PM
    > To: firewall-wizards@honor.icsalabs.com
    > Subject: Re: [fw-wiz] PIX Licensed Connections Limit
    >
    > Alan,
    >
    > On the firewall you purchased version 4.4(5), you will need to do the
    > following steps after purchasing the license code upgrade from Cisco.
    >
    > http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_installation_
    > guide09186a00800f2561.html#32095
    >
    > You might want to purchase a newer code version with the licenses as you
    > are responsible for purchasing the software when you buy hardware from a
    > venue like Ebay.
    >
    > Thanks,
    > Dave
    >
    > On Wed, 2003-04-16 at 20:27, Alan R. Young wrote:
    > > Hey All
    > >
    > > I just bought a PIX 520 on ebay.
    > >
    > > My question is, how can the licensed connections number be changed?
    > >
    > > Is that a flash rom setting, or what?
    > >
    > > What do I do to change it to unlimited connections?
    > >
    > > Thanks
    > > Alan Young
    > > aryoung@veros.com
    > >
    > >
    > > Cisco PIX 520 Firewall PII 350 MHz
    > > Model: PIX-520 Rev C0
    > > 128 MB Ram
    > > Two Ethernet Cards 10/100
    > > Floppy Disk Drive
    > > PIX Version 4.4(5)
    > > Bios v3.3
    > > Licensed Connections: 1024
    > > This is captured file:
    > > Finesse Bios V3.3
    > > Booting Floppy
    > > Loading from Flash
    > > 128MB RAM
    > > Flash=AT29C040A @ 0x300
    > > mcwa i82559 Ethernet at irq 11 MAC: xxxxxxxxxxxxxx
    > > mcwa i82559 Ethernet at irq 10 MAC: xxxxxxxxxxxxxx
    > >
    > -----------------------------------------------------------------------
    > > || ||
    > > || ||
    > > |||| ||||
    > > ..:||||||:..:||||||:..
    > > c i s c o S y s t e m s
    > > Private Internet eXchange
    > >
    > -----------------------------------------------------------------------
    > > PIX Firewall
    > >
    > > PIX Version 4.4(5)
    > > Licensed Connections: 1024
    > > Maximum Interfaces : 6
    > > Global ()will be Port Address Translated
    > > Cryptochecksum(unchanged): c60b7852 a9d77cf1 1994b34c 2d9290aa
    > > Copyright (c) 1996-1999 by Cisco Systems, Inc.
    > >
    > >
    > >
    > > _______________________________________________
    > > firewall-wizards mailing list
    > > firewall-wizards@honor.icsalabs.com
    > > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    >
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Mike Hoskins: "Re: [fw-wiz] Managed Firewall Service - Opinions"

    Relevant Pages

    • Re: Considering Cicso Pix 501 for home firewall---need info
      ... Most vendors sell those in one year chunks, but there is also a 3 year contract part number, and the better vendors can arrange a support contract for any arbitrary period of time (up to ... and it is quite uncommon for Cisco to give a free "upgrade". ... So if you buy in at 6.3and do not obtain support, and 6.4 comes out 100 days after your purchase, then you are likely to be stuck at 6.3 unless you pay for an "upgrade" or support contract. ... with a 10 user license, a 50 user license, or an unlimited license. ...
      (comp.security.firewalls)
    • Re: [fw-wiz] PIX Licensed Connections Limit
      ... "Alan R. Young" wrote: ... CISCO has thrown me for a loop. ... You will also need to purchase a software upgrade from 1k to UR ... > following steps after purchasing the license code upgrade from Cisco. ...
      (Firewall-Wizards)
    • cisco 1841
      ... I would like to setup ssh to login to the routers, ... This is for the Cisco 1841 IOS Advanced Security. ... I need the advanced security IOS to utilize the VPN tunnel, ... don't think I need to purchase one of these to support a VPN tunnel, ...
      (comp.dcom.sys.cisco)
    • Re: Internal Power Supply for Catalyst 2960
      ... We have purchase several hundred 2924's on the ... avenue is to call ask about a flatrate replacement. ... On many low end Cisco ... I bought it second hand. ...
      (comp.dcom.sys.cisco)
    • Firewalls
      ... I have a client who has had another vendor recommend they purchase a cisco ... router/firewall for their SBS 2003 standard installation. ... Standard is safe enough (it seems to be for all my other clients on the ...
      (microsoft.public.windows.server.sbs)