cisco pix firewall
how do make the vpn more secured with cisco pix firewall.what are the prerequisites to have security with pix firewall.guide about the pix features

Software/Hardware used:
ASKED: January 4, 2006  1:40 AM
UPDATED: November 28, 2007  9:09 PM

Answer Wiki:
That depends on a couple of things that you did not mention. 1) Are you using the VPN capability in the Cisco PIX itself? 2) Are you using the PIX to protect a different VPN solution? In general though, one of the best ways to improve security is by having unique user IDs and passwords - administered by a different system (such as RADIUS, TACACS, etc.) Bob
Last Wiki Answer Submitted:  January 4, 2006  3:30 pm  by  Bobkberg   1,070 pts.
All Answer Wiki Contributors:  Bobkberg   1,070 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

For IPSec, choose better encryption (3DES or AES), use AH+ESP, use Replay Protection, and use a strong authentication (Radius with RSA SecurID etc.) for the users. Also, disable split tunneling whenever possible.

For SSL VPN, make sure to deply Host Checker features (to check the client desktop for some minimal level virus protection etc.)

There are enough resources available at CERT, SANS etc about deploying secure VPNs.

-Ajay

 0 pts.