Cisco PIX 520 - PIX Firewall 520 Manual de usuario

Corporate Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 526-4100

Cisco PIX Device Manager

Installation Guide

Version 3.0

Text Part Number: 78-15483-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION,LOST PROFITS OR LOSSOR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES

This document is to be used in conjunction with the appropriate documentation for your Cisco PIX Firewall system.

CCIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of Cisco Systems, In

Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CC

CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo,

Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch, Fast Step, GigaStack, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net

Readiness Scorecard, LightStream, MGX, MICA, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Regi

ScriptShare, SlideCast, SMARTnet, StrataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are regis

trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.

All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relations

between Cisco and any other company. (0304R)

Cisco PIX Device Manager Installation Guide

iii

CiscoPIX Device ManagerInstallation Guide,Version 3.0

78-15483-01

CONTENTS

Preface vii

Document Objectives vii

Audience vii

Installation Warning viii

Safety Warning Description ix

Document Organization xiii

Document Conventions xiii

Terms and Acronyms xiv

Related Documentation xv

Obtaining Documentation xv

Cisco.com xv

Documentation CD-ROM xv

Ordering Documentation xv

Documentation Feedback xvi

Obtaining Technical Assistance xvi

Cisco TAC Website xvi

Opening a TAC Case xvi

TAC Case Priority Definitions xvii

Obtaining Additional Publications and Information xvii

Overview 1 - 1

Introduction 1 - 1

Data Encryption Overview 1 - 2

PIX Firewall System Requirements 1 - 4

PIX Firewall System Interoperability with PDM 1 - 4

Flash Memory Requirements 1 - 5

Maximum Configuration File Size 1 - 5

Software Requirements 1 - 6

Upgrading toa New Software Release 1 - 6

PC/Workstation Requirements 1 - 6

Supported Platforms 1 - 8

Windows 1 - 8

Sun Solaris 1 - 9

Red Hat Linux 1 - 9

Contents

Cisco PIX Device Manager Installation Guide, Version 3.0 78-15483-01

Preparing to Install PDM 2 - 1

Notes and Cautions 2 - 1

Caution 2 - 2

Installation Checklist 2 - 2

Preparing to Install PDM 2 - 3

Determining the IP Address of Your Server 2 - 4

Windows NT, Windows 2000, or Windows XP 2 - 4

Windows 98 or Windows ME 2 - 4

Sun Solaris 2 - 5

Linux 2 - 5

Installing PDM 3 - 1

Downloading the PDM Software 3 - 1

Downloading PDM from Cisco.com 3 - 1

Downloading PDM Using FTP 3 - 2

Installing PDM 3 - 2

Loading the PDM Image 3 - 4

Configuring PDM 4 - 1

Starting PDM with InternetExplorer 4 - 1

Starting PDM with Netscape Navigator 4 - 2

PDM Home Page 4 - 3

Using the PDM Startup Wizard 4 - 4

VPN Wizard 4 - 5

Site-to-Site VPN 4 - 5

Remote Access VPN 4 - 5

Select Interface 4 - 6

Configuring VPN Tunnels 4 - 6

Configuration Recommendations 4 - 6

Tips and Troubleshooting 5 - 1

Checking Your Connection to the PIX Firewall 5 - 1

Tips on Using PDM 5 - 2

Troubleshooting 5 - 3

Using a TFTP Server A -1

Obtaining a Windows TFTP Server A - 1

Enabling UNIX TFTP Support A - 2

Enabling TFTP Access on a Sun Solaris System A - 2

Contents

CiscoPIX Device ManagerInstallation Guide,Version 3.0

78-15483-01

Enabling TFTP Access on a Linux System A - 2

TFTP Download Error Codes A - 3

NDEX

Contents

Cisco PIX Device Manager Installation Guide, Version 3.0 78-15483-01

vii

Cisco PIX Device Manager Installation Guide

78-15483-01

Preface

This preface includes the following sections:

•Document Objectives, page vii

•Audience, page vii

•Installation Warning, page viii

•Document Organization, page xiii

•Document Conventions, page xiii

•Terms and Acronyms, page xiv

•Related Documentation, page xv

•Obtaining Documentation, page xv

•Obtaining Technical Assistance, page xvi

•Obtaining Additional Publications and Information, page xvii

Document Objectives

This guide describes how to install and access the Cisco PIX Device Manager (PDM) software.

Audience

This guide is for network administrators who perform the following:

•Manage network security

•Install and configure firewalls

viii

Cisco PIX Device Manager Installation Guide 78-15483-01

Preface

Installation Warning

Warning

Only trained and qualified personnel should be allowed to install, replace, or service

this equipment.

Waarschuwing

Deze apparatuur mag alleen worden geïnstalleerd, vervangen of hersteld door bevoegd

geschoold personeel.

Varoitus

Tämän laitteen saa asentaa, vaihtaa tai huoltaa ainoastaan koulutettu ja laitteen

tunteva henkilökunta.

Attention

Il est vivement recommandé de confier l'installation, le remplacement et la maintenance de ces

équipements à des personnels qualifiés et expérimentés.

Warnung

Das Installieren, Ersetzen oder Bedienen dieser Ausrüstung sollte nur geschultem, qualifiziertem

Personal gestattet werden.

Figyelem!

A berendezést csak szakképzett személyek helyezhetik üzembe, cserélhetik és tarthatják karban.

Avvertenza

Questo apparato può essere installato, sostituito o mantenuto unicamente da un personale

competente.

Advarsel

Bare opplært og kvalifisert personell skal foreta installasjoner, utskiftninger eller service på

dette utstyret.

Aviso

Apenas pessoal treinado e qualificado deve ser autorizado a instalar, substituir ou fazer a revisão

deste equipamento.

¡Advertencia!

Solamente el personal calificado debe instalar, reemplazar o utilizar este equipo.

Varning!

Endast utbildad och kvalificerad personal bör få tillåtelse att installera, byta ut eller reparera

denna utrustning.

Cisco PIX Device Manager Installation Guide

78-15483-01

Preface Safety Warning Description

Safety Warning Description

Warning

IMPORTANT SAFETY INSTRUCTIONS

This warning symbol means danger. You are in a situation thatcould cause bodily injury. Beforeyou

work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar

with standard practicesfor preventingaccidents. To see translations of the warnings thatappearin

this publication, refer to the translated safety warnings that accompanied this device.

Note: SAVE THESE INSTRUCTIONS

Note: This documentation is to be used in conjunction with the specific product installation guide

that shipped with the product. Please refer to the Installation Guide, Configuration Guide, or other

enclosed additional documentation for further details.

Waarschuwing

BELANGRIJKE VEILIGHEIDSINSTRUCTIES

Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan

veroorzaken. Voordat u aan enige apparatuur gaat werken, dient u zich bewust te zijn van de bij

elektrische schakelingen betrokken risico's en dient u op de hoogte te zijn van de standaard

praktijken om ongelukken te voorkomen. Voor een vertaling van de waarschuwingen die in deze

publicatie verschijnen, dient u de vertaalde veiligheidswaarschuwingen te raadplegen die bij dit

apparaat worden geleverd.

Opmerking BEWAAR DEZE INSTRUCTIES.

Opmerking Deze documentatie dient gebruikt te worden in combinatie met de

installatiehandleiding voor het specifieke product die bij het product wordt geleverd. Raadpleeg de

installatiehandleiding, configuratiehandleiding of andere verdere ingesloten documentatie voor

meer informatie.

Varoitus

TÄRKEITÄ TURVALLISUUTEEN LIITTYVIÄ OHJEITA

Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen

kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja

tavanomaisista onnettomuuksien ehkäisykeinoista. Tässä asiakirjassa esitettyjen varoitusten

käännökset löydät laitteen mukana toimitetuista ohjeista.

Huomautus SÄILYTÄ NÄMÄ OHJEET

Huomautus Tämä asiakirja on tarkoitettu käytettäväksi yhdessä tuotteen mukana tulleen

asennusoppaan kanssa. Katso lisätietoja asennusoppaasta, kokoonpano-oppaasta ja muista

mukana toimitetuista asiakirjoista.

Cisco PIX Device Manager Installation Guide 78-15483-01

Preface

Safety Warning Description

Attention

IMPORTANTES INFORMATIONS DE SÉCURITÉ

Cesymboled'avertissementindiqueundanger. Vousvoustrouvezdansune situationpouvant causer

des blessures ou des dommages corporels. Avant de travailler sur un équipement, soyez conscient

desdangersposésparlescircuitsélectriquesetfamiliarisez-vousaveclesprocédurescouramment

utilisées pour éviter les accidents. Pour prendre connaissance des traductions d'avertissements

figurantdanscette publication, consultezlesconsignesde sécuritétraduitesqui accompagnentcet

appareil.

Remarque CONSERVEZ CES INFORMATIONS

Remarque Cette documentation doit être utilisée avec le guide spécifique d'installation du produit

qui accompagne ce dernier. Veuillez vous reporter au Guide d'installation, au Guide de

configuration, ou à toute autre documentation jointe pour de plus amples renseignements.

Warnung

WICHTIGE SICHERHEITSANWEISUNGEN

Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu einer

Körperverletzung führen könnte. Bevor Sie mit der Arbeit an irgendeinem Gerät beginnen, seien Sie

sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur

Vermeidung von Unfällen bewusst. Übersetzungen der in dieser Veröffentlichung enthaltenen

Warnhinweise sind im Lieferumfang des Geräts enthalten.

Hinweis BEWAHREN SIE DIESE SICHERHEITSANWEISUNGEN AUF

Hinweis Dieses Handbuch ist zum Gebrauch in Verbindung mit dem Installationshandbuch für Ihr

Gerät bestimmt, das dem Gerät beiliegt. Entnehmen Sie bitte alle weiteren Informationen dem

Handbuch (Installations- oder Konfigurationshandbuch o. Ä.) für Ihr spezifisches Gerät.

Figyelem!

FONTOS BIZTONSÁGI ELÕÍRÁSOK

Ez a figyelmezetõ jel veszélyre utal. Sérülésveszélyt rejtõ helyzetben van. Mielõtt bármely

berendezésen munkát végezte, legyen figyelemmel az elektromos áramkörök okozta kockázatokra,

és ismerkedjen meg a szokásos balesetvédelmi eljárásokkal. A kiadványban szereplõ

figyelmeztetések fordítása a készülékhez mellékelt biztonsági figyelmeztetések között található.

Megjegyzés ÕRIZZE MEG EZEKET AZ UTASÍTÁSOKAT!

Megjegyzés Ezt adokumentációt akészülékhez mellékelt üzembehelyezésiútmutatóvalegyütt kell

használni. További tudnivalók a mellékelt Üzembe helyezési útmutatóban (Installation Guide),

Konfigurációs útmutatóban (Configuration Guide) vagy más dokumentumban találhatók.

Avvertenza

IMPORTANTI ISTRUZIONI SULLA SICUREZZA

Questo simbolo di avvertenza indica un pericolo. La situazione potrebbe causare infortuni alle

persone. Prima di intervenire su qualsiasi apparecchiatura, occorre essere al corrente dei pericoli

relativi ai circuiti elettrici econoscere leprocedure standard perlaprevenzionediincidenti. Per le

traduzioni delle avvertenze riportate in questo documento, vedere le avvertenze di sicurezza che

accompagnano questo dispositivo.

Nota CONSERVARE QUESTE ISTRUZIONI

Nota La presente documentazione va usata congiuntamente alla guida di installazione specifica

spedita con il prodotto. Per maggiori informazioni, consultare la Guida all'installazione, la Guida

alla configurazione o altra documentazione acclusa.

Otros manuales para PIX 520 - PIX Firewall 520

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Software de Cisco

Cisco

Cisco 4700M Manual de usuario

Cisco

Cisco 3600 Series Manual de usuario

Cisco

Cisco IPICS Manual de usuario

Cisco

Cisco PVDM2 24DM - Digital Modem Module Manual de usuario

Cisco

Cisco Digital Media System 3.5 Manual de instrucciones

Cisco

Cisco 861W - Integrated Services Router Wireless Manual de usuario

Cisco

Cisco MCS-7825-H3-IPC1 Manual de usuario

Cisco

Cisco Unified Videoconferencing Manager Manual de usuario

Cisco

Cisco CSACSE-1111-K9 - Secure Access Control Server Solution... Manual de usuario

Cisco

Cisco MCS 7825 Series Manual de usuario

Cisco

Cisco CRS-1 Series Manual de usuario

Cisco

Cisco Cisco Access Registrar 4.2 Manual del operador

Cisco

Cisco GO GREEN Manual de usuario

Cisco

Cisco ASA5500-SC-5= - ASA 5500 Security Context Manual de usuario

Cisco

Cisco 5520 - ASA IPS Edition Bundle Manual de usuario

Cisco

Cisco AS5200 - Universal Access Server Cómo utilizar

Cisco

Cisco DVD-ROM Manual de instalación y operación

Cisco

Cisco TrustSec 3.0 Cómo utilizar

Cisco

Cisco ROUTER-SDM-CD Manual de usuario

Cisco

Cisco CONFERENCING EXTENSIONS - FOR MICROSOFT EXCHANGE... Manual de usuario

Cisco

Cisco Nexus 7000 Series Guía

Cisco

Cisco Router IOS XR Manual de usuario

Cisco

Cisco Catalyst Series Switch 2940 Manual de usuario

Cisco

Cisco 2600 Series Cómo utilizar

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario