Disabling PIX Interfaces...

[rvaccare]

I am reviewing a PIX configuration where two interfaces do not have IP addresses assigned to them ("no ip address"), but the interfaces have not been disabled using the "shutdown" keyword. Are there exposures in this instance due to the fact that the interfaces have not been "shutdown"?

Thank you.

[mostiguy]

there shouldn't be a problem - I am 99% certain that pixen disable all interfaces by default (or at least the non-inside ones), so that there are probably not commands because there have not been ones manually added, and thus they are still shutdown. What do you see on a show interface - if interface xxx is down, then it is down (line protocol up/down refers to whether there is a worknig cable plugged into it)