Validation testing on a PIX 506e

[Misadventure]

Hi All,

Just setup our PIX and now at a stage where I want to test - does anyone have a comprehensive list of things I should do?

Regards,

Misadventure

 

[yizhar]

HI.

Here are some tips:

* Use syslog messages:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/syslog/index.htm

I recommend level 4 (warning) if you want to see what the pix has blocked only, or level 6 (informational) if you want to see also legitimic traffic that the pix allowed (but this will generate a lot of syslog messages and might be problematic for production).

* Test with TCP connections (telnet/ftp/http/etc...) prior to testing with ping.
For example, try to telnet from inside to perimeter router (if not blocked for telnet), and from perimeter router to port 25 of internal mail server.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar