Re: Upgrade Pix Software

["Nuno Fernandes" <nfernandes () real-secure com>]

Joe,

    When I said to put in the tftp-server line in the Cisco PIX, that is for
it to know how and where to send it's configs to a tftp server. It itself is
not a tftp server, but a client. Plus when ever you normally type write
memory, it's a good habits to also type write network to save your config on
a remote tftp server. Also if you are worried about it being viewed over the
network, you can tell what interface to send the config out from. So if you
are security conscious, you'd have a separate secure network for all your
management network devices.

P.S. This is all on the Cisco site, if you like to conform it.

Thank you,


----- Original Message -----
From: "Joe Dauncey" <toothbrushhead () yahoo com>
To: "Nuno Fernandes" <nfernandes () real-secure com>;
<firewall-wizards () nfr net>
Cc: "John Adams" <jna () retina net>
Sent: Saturday, December 09, 2000 7:08 PM
Subject: Re: [fw-wiz] Upgrade Pix Software


> Nuno,
>
> If the PIX is anything like the routers then you don't need to set the
> machine up as a TFTP server to write back over the network. It's not a
> server task but a client task. On the contrary, I think the last thing
> you want to do is set a firewall up as a TFTP server !!!
>
> I'd be interested to know if backing up your config to a TFTP server
> includes sending a copy of the private key to it ? If not, then how do
> you back it up ?
>
> Joe
>
> Nuno Fernandes wrote:
> > Hi,
> >
> > you can setup the tftp-server line on the PIX and just do net write on
> > changes and have an up to date config all the time as well.
> >
> > ----- Original Message -----
> > From: "John Adams" <jna () retina net>
> > To: "Nuno Fernandes" <nfernandes () real-secure com>
> > Cc: <christoph () puetz-colorado com>; <firewall-wizards () nfr net>
> > Sent: Friday, December 08, 2000 8:44 PM
> > Subject: Re: [fw-wiz] Upgrade Pix Software
> >
> > > On Thu, 7 Dec 2000, Nuno Fernandes wrote:
> > >
> > > > Hi,
> > > >
> > > >     It will not wipe your current config.
> > >
> > > But you really should back it up; I've lost crypto configs when doing
PIX
> > > upgrades. Also copy down your activation key somewhere, because if you
> > > lose that, you can't use the PIX.
> > >
> > > -john
> > >
> > > --
> > > J. Adams http://www.retina.net/~jna
> > > You are supposed to be a consumer, a black hole for goods, advertising
and
> > > content. They only want to allocate enough upstream bandwidth for
> > > 10,000,000 buy buttons. Producing or sharing information is a
subversive
> > > act and will not be tolerated. -anonymous coward on /.
> >
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () nfr com
> > http://www.nfr.com/mailman/listinfo/firewall-wizards
>
> --
> Joe Dauncey
> toothbrushhead () yahoo com
> PGP Key ID: 0x247CB70A
> *****************************


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards