OS 6.3

[Dave Rinker <firewall () dsrtech com>]

received word from my account rep that PIX 6.3 should be out by march
17th.

I've seen a demo and one of the best features looks like the numbered
ACL.

access-list 101 line 1 deny ip 0.0.0.0 255.0.0.0 any
access-list 101 line 2 deny ip 127.0.0.0 255.0.0.0 any
access-list 101 line 3 deny ip 10.0.0.0 255.0.0.0 any
access-list 101 line 4 deny ip 192.168.0.0 255.255.0.0 any


so you can insert into the mix by specifying the line number! no more
removing the whole ACL to move a line up the stack!

also, this version supports transparent IPSec through PAT/NAT.
with "isakmp nat-traversal" - same as new version of router IOS.



I HAVE SEEN THE TOP OF THE MOUNTAIN, AND IT IS GOOD.



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards