Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Bronze

Control over configs

I'm thinking of outsourcing my companies security services, anyone have info on how much control there is to change configs on the firewall?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Control over configs

PIX v6.2 introduced the ability to do command authentication and authorization for specific commands, either by configuring it locally on the PIX itself or on a external TACACS server.

The following link should tell you everything you need:

http://www.cisco.com/warp/public/110/pix_command.shtml

3 REPLIES
Cisco Employee

Re: Control over configs

PIX v6.2 introduced the ability to do command authentication and authorization for specific commands, either by configuring it locally on the PIX itself or on a external TACACS server.

The following link should tell you everything you need:

http://www.cisco.com/warp/public/110/pix_command.shtml

New Member

Re: Control over configs

I currently work for a company that handles the WAN security for many fortune 1000 and 500 companies. I am the Sr. Security Ops Engineer and our postion on these matters is one that we definitely listen and work with the customer. We hold frequent calls to discuss their request and explain the ramifications if any so that they understand their vulnerabilities before we allow any changes to be made. We do not allow them hands on control of the firewalls for the simple fact that we have found most people have less then adequate knowledge when it comes to security. Unless you or a member of your team has real world experience with this I would highly suggest outsourcing to start and then perhaps migrate the control back in house as you gain experience.

New Member

Re: Control over configs

There is a very good articale on this months new security CSO magazine that will guide you to make the best decision. Check the article "Why Outsourcing won't work"

http://www.csoonline.com/read/030103/undercover.html

It is good to evaluate the cost benefits versus what is at stake !

Lawrence

Lnjogu@hotmail.com

105
Views
10
Helpful
3
Replies