Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

PDM and PIX

Hi

Is it possible to manage a PIX or VPN concentrator from a management station like the PDM. If so, if a hacker broke in to the PIX from outside, I would like for them to be unable to modify the PIX or VPN concentrator configuration, as this would be disabled because it is managed from the management station. This way the config couldnt be modified to allow further attacks on the network.

Is this possible

Regards

Karl

8 REPLIES
Cisco Employee

Re: PDM and PIX

In the PIX you have to specify what IP addresses or subnets have PDM access with the "http" command. See http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/gl.htm#1029823

For the VPN3000 concentrator, you can also limit what IP addresses have GUI access under the Administration - Access Rights - Access Control List menu.

Community Member

Re: PDM and PIX

Hi Glenn

Thanks for your reply

I tried this but it didnt work, do I connect on port 80 or something else.

I entered:-

config)#http 10.0.0.30 255.255.255.255 inside

config)#http server enable

10.0.0.30 is the ip addss of client that wishes to connect to the browser.

Am i missing anything?

Regards

Re: PDM and PIX

Hi,

is DES or 3DES enabled on the firewall? At least DES is required to make the PDM work.

You can register for a free 56bit DES license at this URL:

https://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=324

Kind Regards,

Tom

Community Member

Re: PDM and PIX

Hi Tom

This is what I get with a show ver

Licensed Features:

Failover: Disabled

VPN-DES: Enabled

VPN-3DES: Disabled

Does this mean I am ok

Best regards

Karl Jones

Re: PDM and PIX

Hi,

should be OK.

Please have a look at this URL for more PDM troubleshooting:

http://www.cisco.com/warp/public/110/pdm_http404.shtml

Kind Regards,

Tom

Community Member

Re: PDM and PIX

Karl,

try :

pdm location 10.0.0.30 255.255.255.255 inside

In 6.2.2 if you type PDM ? this command is not shown but you need it. The only mention of the PDM location is when clearing.

HTH

Ali

Community Member

Re: PDM and PIX

Hi

Have you tried using https to connect rather than http?

HTH

Kev

Community Member

Re: PDM and PIX

Hi Guys

I have managed to get this working now

Thanks for your assistance

Regards

181
Views
0
Helpful
8
Replies
CreatePlease to create content