pix 501

Unanswered Question
May 10th, 2008


i just trying get some certifications from cisco like CCNP and some exposure to firewalls and vpn

i just wanted to know is a pix 501 good for my home lab practice

can learn good on it as i already have four routers and a couple of switches in my home lab

the pix 501 i am trying to buy has this output

'sh ver' output:

pixfirewall> sh ver

Cisco PIX Firewall Version 6.3(1)

Cisco PIX Device Manager Version 3.0(1)

Compiled on Wed 19-Mar-03 11:49 by morlee

pixfirewall up 19 secs

Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz

Flash E28F640J3 @ 0x3000000, 8MB

BIOS Flash E28F640J3 @ 0xfffd8000, 128KB

0: ethernet0: address is 000e.8325.3952, irq 9

1: ethernet1: address is 000e.8325.3953, irq 10

Licensed Features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES-AES: Enabled

Maximum Interfaces: 2

Cut-through Proxy: Enabled

Guards: Enabled

URL-filtering: Enabled

Inside Hosts: 10

Throughput: Unlimited

IKE peers: 10

Is it good for my practice or i need a different one

please help

Thank you

Gursaran Abott

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
brianjpisa Sun, 05/11/2008 - 16:13

It is good practice if you want to learn about firewalls. The version that is installed is not the newest, but will still work fine (6.3(5) is lastest). PIX and routers are totally different. Using the ? does not show you the next available commands, it only shows you how the whole command works. There is no using the tab key to complete a command. Also one thing that annoys me is when creating an access list you use a subnet mask in the command line, no a wildcard mask like in routers....that is important to remember. Personally I like the ASA 5505 a lot better. It is the same price brand new and comes with 8 ports, 2 of which are POE I think Cisco might be phasing out the PIX's eventually.

davehartburn Wed, 05/14/2008 - 06:49

If it is cheap, then there is nothing wrong with it.

For the first two CCNP modules, BSCI and BCMSN, I doubt it will be much use. However you can probably put it too good use on the ISCW module. I've only skim read the VPN and security chapters, but they pretty much seem to cover what I have done on PIXes out in the real world.


This Discussion