Chapter Review

This chapter looked at the Cisco PIX Device Manager (PDM) as a graphical interface tool to facilitate configuration and monitoring one or more PIX Firewalls. While particularly useful for those administrators who lack a solid knowledge of the PIX Firewall command-line interface (CLI), the PDM is an easy tool for any administrator to use to access most of the PIX functionality.

PDM monitoring features include real-time graphs and data, including connection, IDS, and throughput information for the selected PIX Firewall. You can view up to five days of historical data. The tabbed-page graphical interface with Windows Explorer-like controls on the left side makes it easy to check setting, configuration, or performance.

PDM v2.1, which runs on any PIX Firewall supporting the v6.2 operating system, added two wizards to greatly simplify the basic PIX Firewall setup, as well as both site-to-site and remote access VPN connections.

The failover features are available on the larger PIX devices to provide rapid and reliable redundancy. The two units that make up a failover pair must be physically identical. After configuring the primary unit, the standby will receive the configuration, making it identical to the primary right down to the IP and MAC addresses. Each time the primary boots up, the configuration is copied to the standby unit, or a write standby command can be used to accomplish the same thing.

Password recovery and OS upgrade procedures were also covered.

Questions

1.?	Which one of the following statements is false about Cisco PIX Device Manager (PDM)? It’s a Java applet that resides in the PIX Flash It supports Windows (except 3.1 and 95), Sun UNIX, and Red Hat Linux It’s a wizards-based application used exclusively for feature setup Version 2.1 requires PIX OS 6.2 or higher
2.?	Which one of the following statements is false about PDM v2.1? The PIX unit must have an activation key for DES or 3DES It will run on any PIX Firewall If the PIX Firewall is running software version 6.2, then the PDM requirements to install v2.1 have already been met At least 8MB of Flash memory is required
3.?	Which one of the following statements is false about web browsers for PDM v2.1? It must be Java-enabled All versions of Netscape are supported on all three platforms It must support HTTPS (HTTP over SSL) Cisco recommends Internet Explorer on the Windows hosts for PDM
4.?	Which one of the following commands will upgrade the PDM software? pixfirwall# copy tftp flash:pdm pixfirwall# copy tftp flash pixfirwall# copy tftp pdm-211.bin flash C:> copy pdm-211.bin \flash
5.?	Which command would launch PDM? http://192.168.1.1 http://192.168.1.1/pdm https://192.168.1.1 http://192.168.1.1:pdm
6.?	If a write erase and reload command are issued on a PIX, what command will prompt for the minimum configuration required to run PDM? startup Wizards \| Startup Wizard setup autoconfig
7.?	Which one is not a PDM Wizard in v2.1? Site-to-site VPN AAA setup Startup Remote access VPN
8.?	How many missed failover hellos trigger a PIX failover? 1 2 4 It can be configured to any value
9.?	Which PIX platform can’t be used with the failover feature? 506/506e 515/515e 520s 535
10.?	Which two pairs of software licenses can be used for a PIX failover pair? Unrestricted (UR)/Unrestricted (UR) Failover (FO)/Failover (FO) Unrestricted (UR)/Failover (FO) Unrestricted (UR)/Restricted (R)
11.?	Which failover method yields the least disruption of dataflows? Serial failover LAN failover Stateful failover Dynamic failover
12.?	Which is a PIX 500 Firewall password recovery lockout utility name? lu62.bin pix62.bin pix62.lu np62.bin
13.?	Which one statement is true about PIX password recovery? V6.2 password recovery is the same as for routers V6.2 password recovery is the same on all PIX platforms Password recovery is dependent on the PIX platform and the current OS version Password recovery requires a floppy disk and the rawrite file
14.?	To use the copy tftp flash command for OS upgrades, what two conditions must be true? PIX Firewall unit is currently running an OS versions 5.1.1 or later PIX Firewall unit has a floppy disk drive PIX Firewall unit has a DES or 3DES activation key PIX Firewall unit doesn’t have a floppy disk drive
15.?	Which is a PIX Firewall OS filename? pix622.bin bh622.bin pix622.exe np622.bin

Answers

1.?	C. It’s a wizards-based application used exclusively for feature setup. While it has two wizards, it can also be used for routine admin and monitoring
2.?	B. It will run on any PIX Firewall. It will run only on those supporting OS v6.2
3.?	B. All versions of Netscape are supported on all three platforms. Netscape 6.x or 7 aren’t supported
4.?	A. pixfirwall# copy tftp flash:pdm
5.?	C. https://192.168.1.1
6.?	C. setup
7.?	B. AAA setup
8.?	B. 2
9.?	A. 506/506e
10.?	A. Unrestricted (UR)/Unrestricted (UR). and C. Unrestricted (UR)/Failover (FO)
11.?	C. Stateful failover
12.?	D. np62.bin
13.?	C. Password recovery is dependent on the PIX platform and the current OS version
14.?	D. and C. PIX Firewall unit is currently running an OS versions 5.1.1 or later, and PIX Firewall unit has a DES or 3DES activation key
15.?	A. pix622.bin