fokar

Members
  • Content count

    35
  • Joined

  • Last visited

Community Reputation

0 Neutral

About fokar

  • Rank
    Newbie
  1. http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/pix_eos.html Jan 28 2008, Cisco announced the end-of-sale and end-of life dates for Cisco PIX Security Appliances, software, accessories, and licenses. The last day for purchasing Cisco PIX Security Appliance platforms/bundles will be July 28, 2008 and the last day to purchase accessories and licenses will be January 27, 2009. It is important to note that Cisco will continue to support Cisco PIX Security Appliance customers through July 27, 2013. Cisco PIX Security Appliance customers are encouraged to migrate to Cisco ASA 5500 Series Adaptive Security Appliances. In addition to providing the same robust firewall and IPsec VPN capabilities as Cisco PIX Security Appliances, the Cisco ASA 5500 Series offers significantly better performance and scalability, SSL VPN support, advanced Unified Communications (voice/video) security, and a modular design that allows you to add features such as intrusion prevention (IPS), antivirus, antispam, antiphishing, and URL filtering. Migration to the Cisco ASA 5500 Series is straightforward, because consistent management and monitoring interfaces allow you to take advantage of your knowledge and investment in Cisco PIX Security Appliances. Key Milestones for the Cisco PIX Security Appliance End-of-Sales Milestone Date External announcement January 28, 2008 End of sales for platforms and bundles July 28, 2008 End of sales for accessories January 27, 2009 End of software maintenance releases July 28, 2009 End of service contract renewals October 23, 2012 End of support/end of life July 27, 2013
  2. Got my answer from TAC- nope. Cisco doesn't have a tool. Curious tho to hear from anyone else on this if they've done this before and how...
  3. Does anyone know of a tool that will take the XML dump from and do something constructive with it so I can configure an ASA5500 with those settings? I have a client with a VPN concentrator with 50 users, probably 20 tunnels, and at least that many filters/routes/rules, etc. And (who knows why) they have them all defined locally, rather than using RADIUS. They want to continue doing it this way, so I am forced to put all those users, groups, ACLs, etc., into the ASA manually. It's not a matter of being able to do it, but if you've ever seen the XML dump from a 3015, you know it's not a simple comma-delimited dump or anything. I guess I'm trying to see if there's a shortcut here, or if I'll be spending the next 3 days manually configuring this thing. thanks
  4. This has been discussed a number of times in the past. I suggest you do a search to get all the varying opinions. My feeling is yes, CCNP will help you get the CCSP because you will have a good networking foundation, but it is not required.
  5. What model PIX do you have? You cannot run v7 code on a PIX 501 or 506. It only works with a 515 or better, with at least 128megs of memory.
  6. I think you should find yourself a job as a CCNA. Get some experience, and work on your CCNP on your spare time while on the job. Some companies will even help cover the cost of your exams, and/or send you to training. I think you'll have a hard time finding a job with CCNP or CCSP with no experience. The people interviewing you will probably look at you funny, wondering how you can accomplish such a high certification level with no keyboard time. The company I work for would take the experience over the cert any day, if you can show you know what you're doing. Apparently more people think you should get it even without experience... click here: http://www.sadikhov.com/forum/index.php?sh...=97166&st=0
  7. Yes, the PIX and IOS CLIs are similar. Pix 6.x is fairly different. Pix 7.x OS is much closer to IOS in reference to commands.
  8. Start here. You can take the exams in any order you wish. http://cisco.com/web/learning/le3/le2/le37/le54/learning_certification_type_home.html
  9. Actually, it was Harrison Ford, not Richard Gere.
  10. Are you sure about that? I've never heard that. Is this a new version of 7 code? I'm almost positive it doesn't work on a 506e with up to version 7.1... Wish my 501 could run version 7 code. I'm prolly gonna have to pick up a 5505 just so I can do lab/testing work at home.
  11. PERFORMANCE SUMMARY • Cleartext throughput: Up to 190 Mbps • Concurrent connections: 130,000 • 168-bit 3DES IPSec VPN throughput: Up to 135 Mbps with VAC+ or 63 Mbps with VAC • 128-bit AES IPSec VPN throughput: Up to 130 Mbps with VAC+ • 256-bit AES IPSec VPN throughput: Up to 130 Mbps with VAC+ • Simultaneous VPN tunnels: 2000
  12. There's no reason you can't if you know the material. Good luck.
  13. Yea but 520's are different from 525's. They're ancient. They boot off a floppy disk if I'm not mistaken. I doubt you'll be able to go to 7 with a 520.
  14. http://7200emu.hacki.at/viewforum.php?f=17
  15. The support pack is Cisco's SmartNet contract. It gives you hardware replacement in case it goes bad, and it gives you phone support as well as software updates. The contracts are renewed yearly, and have various levels of response and coverage. For example, 8x5xNBD = 8 hours a day, 5 days a week, next business day response. That means you'll have a replacement within the next business day. 24x7x4OS = 24 hours a day, 7 days a week, 4 hour response, with an engineer on-site to replace the product. There are various other methods of coverage, but the phone support is definitely worth the money if you need the support.