RE: Question regarding Cisco PIX's PDM

["Jennifer Fountain" <JFountain () rbinc com>]

Hi Erisk,
I believe you can limit access by adding the following to your
running/startup config:

http server enable
http 192.168.100.1 255.255.255.255 inside (host)
and/or
http 192.168.100.0 255.255.255.0 inside (network)

This specifies the host or the network you want to allow to acccess the
PDM.  

Once you are in the PDM console, you can view/modify this information by
clicking on configuration, system properites, Administration and click
on PDM/HTTPS. (these instructions depend on your version of your PDM -
which should be 3.0 or greater)

HTH
Jenn



-----Original Message-----
From: erisk [mailto:erisk () iinet net au] 
Sent: Wednesday, November 12, 2003 4:24 AM
To: security-basics () securityfocus com
Subject: Question regarding Cisco PIX's PDM

Hi,

I have a question regarding the PDM command...

How does one limit PDM access to people/clients on the inside
interface...
Do you have to define an explicit ACL for https for the PIX's internal
interface? Will this still stop it or are there other commands that you
can use??

Regards


------------------------------------------------------------------------
---
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE The Presidio
integrates PGP data encryption and XML Web Services security to simplify
the management and deployment of PGP and reduce overall PGP costs by up
to 80%.
FREE WHITEPAPER & 30 Day Trial -
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to
simplify the management and deployment of PGP and reduce overall PGP costs
by up to 80%.
FREE WHITEPAPER & 30 Day Trial -
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027
----------------------------------------------------------------------------