My sales rep is telling me that there is an unrestricted user upgrade for a cisco pix 501 but according to the following cisco link there doesn't appear to any such beast. Is there another link someone could send me to clarify this a little bit.
I've got a similar question about liscensing on the Pix 501. If a person was to put an ACL inbound on the inside interface, would the dropped connections count towards the 10 total IP addresses? I know this is a silly way to use the Pix, but I'm being asked to research this.
From what i understand, no, not unless they actually make a 'connection'. If they are not making a connection, then that does not count.
The downside to the 501, is that once it has 10 different hosts that have made a connection, you are maxed out. Even if one of the hosts drops a connection, it does not become available to someone else until you reset the pix. The connection is limited to that address only.
A minor clarification here. The PIX actually counts the local host entries to determine the max number of users. If you deny the packets from hosts before it hits the PIX, then you are fine. The PIX will remove these local hosts (sh local-host) when the xlates and conns are torn down. In most cases, these will be removed if the conns are torn down normally. Even if this does not happen, there are timeouts on the PIX that will delete the xlates and conns should the idle time be reached. Hope this helps clarify a little...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...