Re: Protecting PIX Firewall at the Perimeter Router

From: R P G (inittab@jtan.com)
Date: 11/07/02 

Date: Wed, 6 Nov 2002 21:05:23 -0500 (EST)
From: R P G <inittab@jtan.com>
To: <security-basics@security-focus.com>

Put an OpenBSD firewall in front of the PIX. That should protect it.

> > Hi All,
> >
> > I wanted some suggestions\practical experiences for protecting a
> > Firewall wall at the Perimeter Router Level.
> >
> > We have a PIX Firewall connected to our Cisco Router, which is connected
> > to the Internet. Should there be any IOS Firewall Rules in the Router,
> > other than blocking Telnet,FTP etc to the Firewall itself ?
> >
> > PIX will be doing NAT, protecting DMZ machines, and IPSec connections.
> >
> > Regards \\ Naman
> >
>

Relevant Pages

  • Re: [fw-wiz] CERT vulnerability note VU# 539363
    ... Not for inbound connections, but doesn't a stateful firewall prevent ... If the firewall protecting a web server ... To me it seems that stateless access control only protects my side from ...
    (Firewall-Wizards)
  • Re: [fw-wiz] Scheduling PIX commands
    ... I suggested being within ear shot of the rack containing the Firewall at 2 ... dependent of monitoring the state of connections (back to the client and / ... clearing the xlate table, i dont see how that could go very wrong. ... We've just made some changes to our PIX config, ...
    (Firewall-Wizards)
  • Re: Alternative to Norton Internet Security?
    ... I have net experienced any viruses or other unwanted downloads / attacks. ... Is there an alternative security software/system available that is as good at protecting my system but without the cost in system performance? ... What WinXP's firewall does not do, is protect you from any Trojans or spyware that you might download and install inadvertently. ... it is incumbent upon each and every computer user to learn how to secure his/her own computer. ...
    (microsoft.public.windowsxp.general)
  • Re: Making Outpost work
    ... >> I am finding it quite hard configuring this firewall. ... Protecting a computer is a complex task, ... >> I do NOT REALLY NEED FEATURES for mail attachments, cookies, ActiveX, ... >> better than others but I would have like even more reporting tools). ...
    (comp.security.misc)
  • Re: Making Outpost work
    ... >> I am finding it quite hard configuring this firewall. ... Protecting a computer is a complex task, ... >> I do NOT REALLY NEED FEATURES for mail attachments, cookies, ActiveX, ... >> better than others but I would have like even more reporting tools). ...
    (comp.security.firewalls)