Cisco Firewall FAQ and Answers

This paper is a collection of Cisco agent training materials, which covers the pre-sales questions of routers, switches, IP/TV, firewalls, VPNs, network management, HFC, VoIP and equipment procurement, and can also be used as an introductory material.

106 question: Does Cacheengine have URL filtering function?

Answer: The cacheengine1.7-2.0 version of the software supports a function called URL blocking, which is configured on the Cacheengine adapter interface to block traffic from a specific address. The CacheEngine2.1 version of the software can be used in conjunction with Websense software based on WindowsNT, UNIX systems to support URL filtering functionality.

107 question: Does Pix-520-fo-bun need to order extra license when buying?

Answer: Pix-520-fo-bun itself already contains an unlimited version of the license, so no additional ordering software is required.

108 question: Is there a special requirement for the client's VPN software for the PIX firewall that can support IPSec?

Answer: Cisco has its own client-side VPN software, which is perfect for interoperability with PIX firewalls.

109 Question: PIX Firewall If you want to implement URL filtering function, need additional software?

Answer: Need to buy third party software PRODUCT, Websense.

110 Question: Which operating systems can the software on Netsonar apply to?

Answer: Netsonar has the following software system: NS-20-NT; ns-201-s-2500. The former is used in windowsnt environments, which are used in Solaris environments.

111 Question: What is the difference between the current Cisco PIX Firewall products?

Answer: In the current PIX firewall series, there are two main models PIX515 and PIX520. The main differences are as follows: PIX515 suitable for use in small and medium enterprises, the maximum can provide 128,000 simultaneous connection number. Network interface card only supports Ethernet network card, the maximum can support to 6 Ethernet network card. It has 2 fixed 10/100m Ethernet cards on its chassis with two expansion slots. PIX520 is suitable for use in telecom industry and large enterprises, and can provide 256,000 simultaneous connections. Supports multiple media types: Ethernet, Token Ring, and FDDI. Up to 6 Ethernet interfaces, maximum support for 3 token ring interfaces and 2 FDDI network interfaces, and Ethernet interface cards can only be mixed with Token ring interfaces. FDDI interface cards can only be used alone. There are no fixed-configured interface cards on the PIX520 chassis, but with 4 expansion slots.

112 question: What is the difference between a Cisco pix firewall and a router firewall?

Answer: The Ciscopix firewall uses the integrated software and the hardware platform, is one kind of specialized firewall product. It employs a dedicated, real-time, secure, non-UNIX and non-NT operating system that provides extremely high security without impacting network performance. The Cisco router Firewall product is implemented by running iOS software with a firewall feature set on the router. It is to achieve cost-effective firewall solution on the basis of low price. However, because this product is in the traditional route routing work and as a firewall to provide security, so in the security performance and data flow processing performance above the special PIX firewall products high. When making a selection, if the user is more concerned about the security of the network and product performance, we recommend the use of a dedicated PIX firewall, when users are more interested in product prices, it is recommended to adopt cost-effective router firewall products based on the Cisco iOS firewall feature set.