New PIX OS version 6.3(1) released 1

[webnetwiz]

If you have CCO login, go to the software center.

 

[havanajoe]

Has anyone upgraded to this yet? I have downloaded it, just a little reluctant to make the jump until I hear that others have done it without any problems.

 

[webnetwiz]

I'm lucky to have a spare 515 w/ a failover box, I'll probably set it up next week and test it.

 

[baddos]

I just installed this on my FO box, but upon rebooting the PIX it crashes. I have contacted Cisco and they are looking into this, so it' back to good old 6.2.2 for me. :-(

 

[Bluecrack]

Has anyone had a chance to install the new beta PDM?

 

[havanajoe]

Well this morning I made the leap and upgraded. It went smoothly and I have experienced no problems so far. Now the fun begins to see what cool new features it has and how I can utilize them.

 

[br0ck]

Baddos

what HW were you using?

I have a 506e and was considering doing the jump.

 

[baddos]

PIX 525.

 

[baddos]

Go ahead and try it. If it doesn't work, just put 6.2.2 back on.

-Bad Dos

 

[havanajoe]

I installed it on a 515 and it's been working great. I also installed the beta pdm that was released and it's working as well. That's too bad that baddos had a problem with it, have you heard back from Cisco yet? With the new version one of the new features is that you can run the PIX as a DHCP server, so I have installed a DCHP server on the DMZ interface and hung my WAP device off of it. Then utilizing the Cisco VPN client I can get into my network or out to the net, without the VPN client you can't get anywhere.

 

[baddos]

Cisco TAC documented my problem in bug id CSCea61756. If you have a CCO account, you can check it out on their website.

What happens is the pix will crash if your other pix is running a different version from 6.3.1. They said they will have this fixed in 6.3.2, but for now I have upgrade them one at a time while the other is unplugged.

 

[havanajoe]

Did they mention an approximate time on the deployment of 6.3.2?

 

[baddos]

Nope.... Only that the fix for my problem is in that release. 2

The fact that they mentioned a version number to me makes me think it won't be too long.

-Bad Dos

 

[punisher5555]

I was on the phone with Tech support last week and they mentioned to me that it might support VLANs. Has anyone seen this feature yet?

 

[webnetwiz]

NetScreen supports this as well. What you'd do is run a trunk to your firewall, and you can have VLAN based ACLs. The PIX can now read VLAN tags, and pretty sure it supports both ISL and 802.1Q

 

[baddos]

Yeah... It's supports VLANs, but not interVLAN routing.

-Bad Dos

 

[webnetwiz]

Right, you'd need either an L3 switch or a router.

 

[tbissett]

Hmmm. Interesting regarding bug ID CSCea61756. I upgrade my two 535s while they were running... Wonder how I managed to avoid a crash. Once it's up, the new OS works great.