CiscoWorks 2.3 and upgrade of Cisco PIX OS from v.6.3.X to v.7.1.X

[indir_avdagic]

Is it possible to use CiscoWorks 2.3 app. (Management Center for Firewalls 1.3.5) to upgrade Cisco PIX OS from version 6.3.X to version 7.1.X or is it a better approach to use CLI & TFTP Server and then move to ASDM?

According to Cisco PIX OS 7.X data sheet it is possible: "Cisco PIX Security Appliances running Cisco PIX Security Appliance Software Version 7.0 can be centrally managed using the upcoming follow-up software release to CiscoWorks VPN/Security Management Solution (VMS) 2.3".

But, in documentation for Management Center for Firewalls 1.3.5 the last supported version is 6.3.5 - more info at:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/mgt_pix/fwmc135/index.htm

Now, I am not sure if I will be able to manage Cisco PIX firewalls from CiscoWorks 2.3 ( Management Center for Firewalls 1.3.5) after upgrade from 6.3.X to 7.1.X, or do I need to use ASDM 5.1 instead?

If I decide to move from CiscoWorks 2.3 to ASDM to be able to manage Cisco PIX OS 7.1.X, what will be the best way to do that?

Thanks

--AI

[ebreniz]

Next-Generation Centralized Management Solutions

Cisco PIX Security Appliances running Cisco PIX Security Appliance Software Version 7.0 can be centrally managed using the upcoming follow-up software release to CiscoWorks VPN/Security Management Solution (VMS) 2.3. This highly scalable, next-generation, three-tiered management solution includes:

Comprehensive configuration and software image management

Device hierarchy with "smart rules"-based configuration inheritance

Customizable administrative roles and access privileges

Comprehensive enterprise change management and auditing

Intelligent discovery and optimization of security policies and object groups

"Touchless" software image management for remote Cisco PIX Security Appliances

Support for dynamically addressed appliances

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet0900aecd80225ae1.html

[indir_avdagic]

PIX 7.x and FWSM 3.x can ONLY be managed with Cisco's newest generation security management suite. This is called the Cisco Security Manager (CSM) and is due for customer availability this month (April 2006).

More info at:

http://www.cisco.com/en/US/products/ps6498/index.html

Respectfully,

Indir Avdagic, Network Security Consultant/Engineer,