About This Guide

Audience

Document Conventions

Getting Help

CD-ROM Documentation

Cisco Connection Online

About This Guide

PIX (Private Internet Exchange) Firewall provides full firewall protection that completely conceals the architecture of an internal network from the outside world.

This guide describes:

Chapter 1, "Introduction," describes the PIX Firewall, its Adaptive Security feature and new features for this release.
Chapter 2, "Installing PIX Firewall," describes how to install PIX Firewall for the first time or when upgrading from a previous version.
Chapter 3, "Configuring and Testing PIX Firewall," describes how to initially configure the PIX Firewall to participate on the network, how to test the new configuration, and how to improve the configuration to access each feature.
Chapter 4, "Command Reference," describes each PIX Firewall command and provides syntax, usage guidelines, and an example.

Audience

This guide is for network managers who perform any of the following tasks:

managing network security
installing and configuring firewalls
managing default and static routes, and TCP and UDP services

If you are not familiar with firewalls and network security, the book Firewalls and Internet Security by William Cheswick and Steven Bellows, 1994, Addison-Wesley, ISBN 0-201-63357-4 is highly recommended.

Document Conventions

This guide uses the following conventions:

The symbol ^ represents the key labeled Ctrl (control). To enter a control key; for example, ^z, hold down the Ctrl key while you press the z key.
Command names are in boldface. PIX Firewall commands are described in Chapter 4, "Command Reference."
Command syntax in Chapter 4, "Command Reference," that you supply is in italics. Command options in square brackets [ ] can be optionally entered, and commands separated by a vertical bar (|) require you to enter one command, but not the other(s).
Examples depict screen displays and the command line in screen font. Information you need to enter is in boldface .

Warning This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.

Note Means reader take note. Notes contain helpful suggestions, indicate commands that will be obsolete in the next release, and draw your attention to material that needs to be considered before performing an activity.

Getting Help

For service and support for a product purchased from a reseller, contact the reseller. Resellers offer a wide variety of Cisco service and support programs, which are described in the section "Service and Support" in the information packet that shipped with your chassis.

Note If you purchased your product from a reseller, you can access Cisco Connection Online (CCO) as a guest. CCO is Cisco Systems' primary, real-time support channel. Your reseller offers programs that include direct access to CCO's services.

For service and support for a product purchased directly from Cisco, use CCO.

CD-ROM Documentation

Note Cisco documentation and additional literature are available on a CD-ROM called Cisco Connection Documentation. The CD is updated and shipped monthly so it might be more current than printed documentation. To order additional copies of the Cisco Connection Documentation CD, contact your local sales representative or call Customer Service. The CD is available both as a single CD and as an annual subscription. You can also access technical documentation on the World Wide Web URL http://www.cisco.com.

Cisco Connection Online

CCO is Cisco Systems' primary, real-time support channel. SMARTnet customers and partners can self-register on CCO to obtain additional content and services.

Note If you purchased your product from a reseller, you can access CCO as a guest. Your reseller offers programs that include direct access to CCO's services.

Available 24 hours a day, 7 days a week, CCO provides a wealth of standard and value-added services to Cisco's customers and business partners. CCO services include product information, software updates, release notes, technical tips, the Bug Navigator, configuration notes, brochures, descriptions of service offerings, and download access to public and authorized files.

CCO serves a wide variety of users through two interfaces that are updated and enhanced simultaneously---a character-based version and a multimedia version that resides on the World Wide Web (WWW). The character-based CCO supports Zmodem, Kermit, Xmodem, FTP, and Internet e-mail, and is excellent for quick access to information over lower bandwidths. The WWW version of CCO provides richly formatted documents with photographs, figures, graphics, and video, as well as hyperlinks to related information.

You can access CCO in the following ways:

WWW: http://www.cisco.com.
WWW: http://www-europe.cisco.com.
WWW: http://www-china.cisco.com.
Telnet: cco.cisco.com.
Modem: From North America, 408 526-8070; from Europe, 33 1 64 46 40 82. Use the following terminal settings: VT100 emulation; databits: 8; parity: none; stop bits: 1; and baud rates up to 14.4 kbps.

For a copy of CCO's Frequently Asked Questions (FAQ), contact ccohelp@cisco.com. For additional information, contact ccoteam@cisco.com.

Note If you need technical assistance with a Cisco product that is under warranty or covered by a Cisco maintenance contract, contact Cisco's Technical Assistance Center (TAC) at 800 553-2447, 408 526-7209, or tac@cisco.com.

Please use CCO to obtain general information about Cisco Systems, Cisco products, or upgrades. If CCO is not accessible, contact 800 553-6387, 408 526-7208, or csrep@cisco.com.

Table of Contents

About This Guide

About This Guide

Audience

Document Conventions

Getting Help

CD-ROM Documentation

Cisco Connection Online