Cisco PIX 515E-R Firewall,128MB,3DES,3FE,V7.12,ASDM5.11

[richmorrow624]

I am looking to buy a firewall such as in the subject line.

I want to practice configs and dmz stuff.

Is there anything I should look out for or any gotchas associated with buying a firewall like this?

[vitripat]

This firewall would be good enough to practice DMZ related configurations.

Regards,

Vibhor.

[richmorrow624]

Thanks for the reply.

Since you are a TAC engineer, I have some firewall questions:

I have a PIX 515E 7.1 unrestricted.

I have created a DMZ interface and enabled it.

Why does this interface show up in ASDM in "Security Policy" with an Implicit Outbound Rule on Any source to Any destination host/network.

This is the only interface that shows this even though there is another interface configured for a customer that is in a DMZ type configuration.

I cannot edit the Implicit rule, I get a pop up box telling me the PIX allows traffic from a higher security to lower security interface.

Why is this the only rule that has this designation