31/05/2010Cisco PIX - Wikipedia, the free encyclopedia Cisco PIX From Wikipedia, the free encyclopedia Cisco PIX (Private Internet eXchange) is a popular IP firewall and network address translation (NAT) appliance. It was one of the first products in this market segment. In 2005, Cisco introduced the newer Adaptive Security Appliance (ASA), that inherited much of PIX features, and in 2008 announced PIX end-of-sale. The PIX technology is still sold in a blade, the FireWall Services Module (FWSM), for the Cisco Catalyst 6500 switch series and the 7600 Router series. PIX 535 Firewall Contents 1 History 1.1 End-of-Life 1.2 Adaptive Security Appliance (ASA) 2 Description of operation 3 Description of hardware 4 Specifications of latest and older models 4.1 Latest models 4.2 Older models 5 Performance specifications 6 List of part numbers for PCI, ISA, and EISA expansion cards 7 Footnotes 8 Citations 9 See also 10 External links http://en.wikipedia.org/wiki/Cisco_PIX 1/14 California. Mayes and Coile hired four long time associates: Jim Jordan. The last day to purchase accessories and licenses was January 27.. The last day for purchasing Cisco PIX Security Appliance platforms and bundles was July 28. software. and licenses. Brantley Coile and Johnson Wu of Network Translation. RFC 1597 and RFC 1631 were being discussed. The ASA series of devices run PIX code 7. Cisco announced the end-of-sale and end-of-life dates for all Cisco PIX Security Appliances.Wikipedia. they wanted to conceal a block or blocks of IP addresses behind a single or multiple registered IP addresses. Beta testing of PIX serial number 000000 was completed and first customer acceptance was on December 21. At a time when NAT was just being investigated as a viable approach. California and designed and coded by Brantley Coile of Athens.31/05/2010 Cisco PIX . Cisco will continue to support Cisco PIX Security Appliance customers through July 27. much as PBXs do for internal phone extensions. 1994 at KLA Instruments in San Jose. Tom Bohannon. and Richard Howes and Pete Tenereillo (both who worked for NTI prior to the acquisition). Cisco introduced the Adaptive Security Appliance (ASA) which combines functionality from the PIX. During this time. 2008. the PIX shared most of its code with another Cisco product. with Brantley Coile being the sole software developer. Inc. Together they continued development on Finesse OS and the original version of the Cisco PIX Firewall. with the ASA using a Linux kernel and PIX continuing to use the traditional Finesse/PIX OS combination. 2013. now known as the PIX "Classic". 2008.[2] Adaptive Security Appliance (ASA) Main article: Cisco ASA In May 2005. accessories.wikipedia. but the now-familiar RFC 1918 had not yet been submitted. VPN 3000 series and IPS product lines.x.[1] After Cisco acquired Network Translation in November 1995. the LocalDirector. The PIX name is derived from its creators' aim of creating the functional equivalent of an IP PBX to solve the then-emerging registered IP address shortage.x the PIX and the ASA use the same software images. Through PIX OS release 7. The PIX quickly became one of the leading enterprise firewall products and was awarded the Data Communications Magazine "Hot Product of the Year" award in January of 1995.org/wiki/Cisco_PIX 2/14 . End-of-Life On January 28. the free encyclopedia History PIX was originally conceived in early 1994 by John Mayes of Redwood City.[3] Description of operation http://en. The design. 2009. Beginning with PIX OS version 8. and testing were carried out in 1994 by John Mayes.0 and later. When they began. the operating system code diverges. Georgia. x. All flash cards and the early encryption acceleration cards. the PIX-PL and PIX-PL2. and it has been through several incarnations: PIX Firewall Manager (PFM) for PIX OS versions 4. By default it allows internal connections out (outbound traffic).). in most configuration commands 'ip' is omitted. but socket based connections (a port and an IP Address . and only allows inbound traffic that is a response to a valid request or is allowed by an Access Control List (ACL) or a conduit. For the PIX 515(E). which runs locally on a Windows NT client. which can run locally on a client or in reducedfunctionality mode over HTTPS.Port communications occur at Layer 4). the free encyclopedia The PIX runs a custom-written proprietary operating system originally called Finesse (Fast InterNEt Server Executive). but not downwards.0 with 64 MB memory installed. a doubling of the memory size is required (32->64 MB for restricted and 64->128MB for Unrestricted/Failover licenses).x formatting. versus conduits and "outbounds". Two protocols for which specific fixup behaviors were developed are DNS and SMTP. Description of hardware The original NTI PIX and the PIX Classic had cases that were sourced from OEM provider Appro. telnet and SSH. not the ASDM software (GUI). The PIX "fixup" capability allows the Firewall to apply additional security policies to connections identified as using specific protocols. Although the 501 and 506E are relatively recent models. DECNet.31/05/2010 Cisco PIX . A 515(E) UR/FO can run 7.org/wiki/Cisco_PIX 3/14 . it allowed just one DNS response from a DNS server on the Internet (known as outside interface) for each DNS request from a client on the protected (known as inside) interface. The PIX can be managed by a command line interface (CLI) or a graphical user interface (GUI). or Transport Layer Firewall. The PIX was the first commercially available firewall product to introduce protocol specific filtering with the introduction of the "fixup" command. It is classified as a network layer firewall with stateful inspection.[4][5][6] Examples of emulators include PEMU and Dynagen[1] (http://www.com ProfSIMs (Networksims) for a simulator [2] (http://networksims. As the PIX is an acquired product.x and 5. although technically the PIX would more precisely be called a Layer 4. and Adaptive Security Device Manager (ASDM) for PIX OS version 7 and greater.x configuration is loaded on a 7.0 is only supported on models 515. but now the software is known simply as PIX OS. as long as the configuration was using ACLs. 525 and 535. the CLI was originally not aligned with the Cisco IOS syntax. which runs over https and requires Java. but that is not recommended as larger configuration and session/xlate tables can exceed the available memory.dynagen. the configuration is automatically converted to 7. the flash memory size of only 8 MB prevents support of version 7.x platform. the configuration is much more IOS-like.com) . This allows for an easy migration from PIX to ASA. As the PIX only supports IP traffic (as opposed to IPX. and with NetworkSims. Starting with version 7. as well as being a virtual private network (VPN) endpoint appliance. When a 5. The 8MB flash size only allows for installation of the PIX OS software. "Fixup" has been superseded by "Inspect" on later versions of PIX OS. The DNS fixup originally implemented a very simple but effective security policy. The PIX can be configured to perform many functions including network address translation (NAT) and port address translation (PAT).x. 515(E).0 can be installed on a 506E (see external links).org) .wikipedia. as its access is not restricted to Network Layer routing. PIX OS v7. PIX Device Manager (PDM) for PIX OS version 6.0. were sourced from Productivity http://en. although rumors suggest that 7. The configuration is upwards compatible. GUI administration was introduced with version 4.Wikipedia. The Cisco PIX was also one of the first commercially available security appliances to incorporate IPSec VPN gateway functionality.x or 6.1.x. The CLI is accessible from the serial console. etc. 2 GBit without overhead taken in account). Nearly all PIXs used Ethernet [Network interface controller|NICs] with Intel 82557. The PIX was constructed using Intel-based/Intel-compatible motherboards. the PIX 501 used an AMD 5x86 processor. Specifications of latest and older models Latest models Model Introduced Discontinued 501 2001 2008 506e 2002 2008 2002 2008 Intel Celeron (Mendocino 515e 2000 2008 Intel Pentium III 525 2000 2008 Intel Pentium III One Intel Pentium III and three IBM 4GS3 PowerNP network 4/14 535 2003 FWSM CPU type Intel AMD Celeron SC520 5x86 (Mendocino http://en. flash cards. This results in a much higher cleartext throughput. The PIX535 has a PCI-X 66MHz/64 bit bus for expansion slots. 510. rather than a Finesse derivative. Both the PIX 510 and 520 share basic components. though the latter two run VxWorks. and Interphase-based FDDI cards. until the introduction of the ASA5580. chassis. and WS-SVC-FWM-1-K9. 10000.org/wiki/Cisco_PIX . NICs. As the lower Cisco ASA models use a PCI bus. and all other standalone models used Intel 80486 through Pentium III processors.wikipedia. such as motherboard. the free encyclopedia Enhancement Products (PEP)[7]. 515/515e. The PIX technology implemented in the FWSM. as the PCI bus is no longer the bottleneck (the PCI bus is 33 MHz and 32 bits. PIX Classic. 525. PIX 515 with top cover removed. and the Cisco Cache Engine CE2050.. etc.31/05/2010 Cisco PIX . Some Intel-based Ethernet cards for the PIX are identified at boot with the designation "mcwa". with the Cisco LocalDirector 416/420/430. Olicom-based Token-Ring cards. 506/506e. for the Catalyst 6500 and the 7600 Router. resulting in maximum throughput of 1. and 82559 network chipsets. The PIX boots off a proprietary ISA flash memory daughtercard in the case of the NTI PIX. the Cisco Service Selector Gateway 6510 (SSG-6510).Wikipedia. and it boots off integrated flash memory in the case of the PIX 501. 82558. the PIX535 was faster for cleartext than its successor ASA. but some older models are occasionally found with 3COM 3c590 and 3c595 Ethernet cards. has a part code of WS-SVC-FWM-1-K9. Later models had cases from Cisco OEM manufacturers. This designation denotes a multicast receive bug in the card's firmware that the designers addressed with a feature they called Multi Cast Work Around. 520. and 535. 3(x) Latest 6.Wikipedia.31/05/2010 [3] (Mendocino SL36A)[4] 300 MHz Intel 440BX Seattle 32 MB Onboard 8 MB[13] Cisco PIX . 1 port 1000baseSX No Yes No No No 1 Yes[25] No No[26] No 5/14 Expansion cards supported No No Supports SSL VPN Floppy drive No No No No No VPN accelerator supported No http://en. 4 port FE.3(x) 8.wikipedia.0(x) Maximum PIX OS version Latest 6. 4 port FE.2(x) 8.x 6(10)[20] 5.x 8(14)[21] AM29F400B AM29F400B 5.1(x) Minimum PIX OS version 6.1(x) 5.x officially supported Max interfaces Fixed internal interface Fixed external interface PCI slots 2[18] 2 3(6)[19] 10/100baseT 10/100baseT 10/100baseT 10/100baseT 10/100baseT 10/100baseT 0 0 2 1 port FE.3(x) 8.org/wiki/Cisco_PIX . 1 port 1000baseSX[24] No Yes No 10/100baseT[22] No 10/100baseT[23] No 3 1 port FE. 1 port 1000baseSX No Yes No 9 1 port FE. 4 port FE.3(x) FWSM 4. the free encyclopedia (Mendocino (Coppermine)[6] [5] SL3BA) (Coppermine) 1 GHz Broadcom Serverworks RCC 512 (1024) MB [10] processors 1 GHz ? 1 GB Onboard 128 MB ATA CompactFlash CPU speed Chipset Default RAM Boot flash device Default flash Boot flash chips PIX BIOS flash chips 133 MHz AMD SC520 16 MB[7] Onboard 8 MB[12] 433 MHz Intel 440BX Seattle 600 MHz Intel 440BX Seattle 128 (256) MB 64 (128) MB [8] [9] Onboard 16 MB[14] Onboard 16 MB[15] ISA card & Onboard[11] 16 MB 1 x 28F640 1 x 28F640 28F640 1 x E28F128J3 1 x EF28F128J3 2 x i28F640J5 AM29F400B/ [17] [16] DA28F320J5 E28F400B5T 5.1(1) FWSM 2. 4(x) AM28F256 4.4(x) 4.31/05/2010 Cisco PIX .wikipedia.4(x) 6/14 CPU speed 100~133 MHz 200 MHz Intel 430FX/TX Intel 440FX Natoma 16 MB ISA card 2 MB x 29C040[40] 166 MHz Intel 430TX 16 MB ISA card 2 MB Chipset Default RAM Boot flash device Default flash 4 MB ISA card 512KB 8 MB ISA card 512KB / 2 MB[35] 2 x i28f020 / 4 x 29C040 [39] Boot flash chips 2 x i28f020 4 1 x i28F640J5 4 x 29C040 2 x i28F640J5 PIX BIOS flash chips AM28F256 AM28F256[42] AM28F256[43] AT29C257 Minimum PIX OS version 1.x 2.Wikipedia.4(x) AT29C257 5.org/wiki/Cisco_PIX .x 4. the free encyclopedia Failover supported Model No 501 No 506e Yes 515e Yes 525 Yes 535 Yes FWSM Older models Model Introduced Discontinued NTI PIX 1994 1995 Intel 486DX2/ Intel Pentium[27] 66 / 90 MHz[32] Classic 47-3158-01 1995 1998 10000 1996 1998 2000 2002 506 1997 1999 Intel Pentium 510 1999 2002 515 1999 2001 520 CPU type Intel Pentium Intel Intel Pentium Pentium Pro[28] MMX[29] 200 MHz Intel 430TX 32 MB Onboard 8 MB[36] Intel Intel Pentium II Pentium MMX[30] (Deschutes)[31] 200 MHz Intel 430TX 32 (64) MB [34] Onboard 16 MB[37] 233~350 MHz[33] 440LX/BX Balboa/ Seattle 128 MB ISA card 2 MB / 16 MB[38] 4 x 29C040 / 2x i28F640J5[41] AM28F256/ AT29C257[44] 4.1(x) http://en. wikipedia.Wikipedia. 1 port Token Ring. 4 port FE.2(2) [45] 4. Mbit/s 56-bit DES http://en. 1 port Token Ring. the free encyclopedia Maximum PIX OS version Max interfaces Fixed internal interface Fixed external interface PCI slots Expansion cards supported VPN accelerator supported Floppy drive Failover supported Model 4.com/en/US/products/hw/vpndevc/ps2030/prod_models_home.2(2) 5.pdf) (page 2) and the specific product pages (http://www.com/application/pdf/en/us/guest/products/ps2030/c1031/ccmigration_09186a008007d065.cisco.3(x)[48] 2 5.x 6(3)[51] Latest 6.1(x)[47] Latest 6.org/wiki/Cisco_PIX 7/14 PIX PIX Classic 10000 90 PIX 501 PIX 506 20 PIX 506e 100 PIX PIX 515 510 147 PIX 515e PIX 520[57] 240 PIX 525 PIX 535 ASA 5520 450 FWSM 60 190 330 1655 5500 .cisco.html) Performance specifications Model Cleartext throughput.3(4)[49] Latest 8. 1 port FDDI Yes Yes No/Yes[56] Classic No No 4 1 port FE. 1 port Token Ring.31/05/2010 Cisco PIX . 1 port FDDI Yes Yes Yes 10000 10baseT 10baseT 0 No No 4+[53] 1 port FE. 1 port 1000baseSX Yes Yes Yes No No ? No No 4 1 port FE.1(x)[46] 5.3(x)[50] 8(6)[52] No No 4+[54] 1 port FE. 4 port FE. 1 port 1000baseSX[55] Yes No Yes 510 515 ? No Yes Yes No NTI PIX No No No 506 520 ---Information on models supported as of 6/27/2005 verified from Cisco's PIX Brochure (http://www. 1 port FDDI Yes Yes Yes 10/100baseT 10/100baseT 2 1 port FE. 000 999. Mbit/s AES-128 throughput.000 25.000[74] 280.500 10.wikipedia. the free encyclopedia throughput.31/05/2010 Cisco PIX .org/wiki/Cisco_PIX 8/14 .000 / 48.000 / 256.000 280.000 128. Mbit/s Max simultaneous connections Max simultaneous hosts (users) Max number of ACL entries Max simultaneous VPN peers Model PIX PIX Classic 10000 6 20 n/a 10 / 63 (135)[58] [59] n/a 20 / 63 (135)[60] [61] n/a 30 / 72 (145)[63] [64] n/a 50 / 100 (425)[65] [66] ? n/a 3 6 16 20 [62] 225 n/a 4.000[73] 130.000 ? 750 IPSec.000 10 25 PIX 506 25 PIX 506e PIX PIX 515 510 0 / 2000[79] n/a PIX 501 PIX 515e FWSM ---Information on models supported as of 6/27/2005 verified from Cisco's PIX Brochure http://en.000[76] per second Unlimited 128 / 1000 / Unlimited unlimited [78] 10 / 50 / Unlimited[77] Unlimited Unlimited ? 256. 0 / 2000[80] 0 / 2000[81] 750 SSL PIX 520 PIX 525 PIX 535 ASA 5520 80.5 30 45 / 130 [67] 65 / 135 [68] 110 / 495 [69] 225 n/a 3.Wikipedia.000 / 250.000 / 140. Mbit/s 168-bit Triple DES throughput.900 total / 64.000 7.000[75] 500. Mbit/s AES-256 throughput.4 25 35 / 130 [70] 50 / 135 [71] 90 / 425 [72] 225 n/a 16.000 100. com/en/US/products/hw/vpndevc/ps2030/prod_models_home. and EISA expansion cards Flash cards ??? .com/support/network/sb/cs-012904. 510. It is manufactured by Productivity Enhancement Products.com/web/about/ac123/ac147/ac174/ac199/about_cisco_ipj_archive_article09186a00800c85a6. ISA. The ASIC used on this card is the LSI L2A1157/695314-003.wikipedia.intel.com/support/network/sb/cs-012904.htm) ). Based on the Intel PWLA8490 Pro/1000 fiber network card with the 82542 (Intel code name "Wiseman") chipset.html) interoperability problems with early 1000baseT switch products [85] (http://www.intel.2 MB ISA flash card used in the PIX Classic.htm) . while the 2MB card populated all four sockets with 29C040 chips ??? . Both booted from a 28F256 chip.Wikipedia.cisco.com/support/network/sb/cs-012904.html) List of part numbers for PCI. There is no 1000baseT variant of this card.31/05/2010 Cisco PIX . 10000. PIX-FLASH-16MB . [86] (http://www.intel. and 520.cisco. is not supported by PIX OS. Ethernet cards PIX-1GE-66 . 520.com/en/US/products/hw/switches/ps700/products_field_notice09186a0080174a72. the Intel Pro/1000-t Server adapter (PWLA8490t[83] (http://www.org/wiki/Cisco_PIX 9/14 .pdf) (page 2) and the specific product pages (http://www.com/application/pdf/en/us/guest/products/ps2030/c1031/ccmigration_09186a008007d065. Aside from progressive manufacturing refinements.64 bit/66 MHz PCI 1000baseSX card for PIX 53x.32 bit/33 MHz PCI 1000baseSX card for PIX 52x. PIX Classic and 10000. In the release notes for PIX OS http://en. and 535.cisco.512 kB ISA flash card used in the original NTI PIX. the free encyclopedia (http://www. Based on the Intel Pro/1000-F fiber network card using the Intel TL82543GC (Intel code name "Livengood") ASIC (PWLA8490sx[82] (http://www. PIX-1GE .16 MB ISA flash card for the PIX 510. as well as the SSG6510 and many LocalDirectors.cisco. It is manufactured by Productivity Enhancement Products.shtml) . but the 512KB card only populated two of the flash sockets with 28F020 chips. The 1000baseT variant of this card. It is manufactured by Productivity Enhancement Products.htm) ). the 512KB and 2MB flash cards were identical aside from the chips that populated it. due to Carrier Extension [84] PIX 512KB flash memory card PIX-PL2 encryption card (http://www. 515.3(1) or higher.64 bit/66 MHz PCI IPSec Hardware VPN Accelerator Card.02. ^ The "inside" port is connected to an internal. PIX-VPN-ACCEL . Part number 74-3176-01. Cisco advises against installing this card in the 525 and 535 [87] (http://www. PIX-1FE .wikipedia. FDDI and Token Ring cards PIX-1TR . 515e. Accelerates DES and Triple DES.32 bit/33 MHz 4/16 Mbit/s PCI Token Ring card based on the Olicom OC-3137/PE-67597 (discontinued and unsupported from PIX OS 6.0.5 [89] (http://www. Footnotes ^ Only the first few NTI PIXs came with the 486 processor. PIX-4FE .cisco. Mentioned in version 4.0. VPN/Encryption acceleration cards PIX-VAC-PLUS . Since these are off-the-shelf PC components predating the creation of the PIX.shtml) PIX-4FE-66 .1 on). PIX-FDDI .html) .Wikipedia.32 bit/8 MHz EISA encryption card found in some early PIXs.32 bit/33 MHz PCI Single-port 10/100 Fast Ethernet card.html) . PIX-PL . referencing caveat CSCdu00850. It is manufactured by Productivity Enhancement Products.1 on. and AES.cisco.1 install guide and supported through at least PIX OS 5.[88] (http://www. Uses the Broadcom BCM5823KPB-5 chip. ??? . which is the only model with a 66 MHz PCI bus.com/en/US/products/sw/secursw/ps2120/prod_release_note09186a008057bf29.4. http://en. Based on the Intel 82558b chipset.1.cisco. 82558 and 82559 chipsets. identified by PIX OS as a PIX-VAC+. although this caveat actually only lists the PIX 535.64 bit/66 MHz PCI Four port 10/100 Fast Ethernet card.32 bit/33 MHz PCI Four port 10/100 Fast Ethernet card.32 bit/33 MHz PCI proprietary DES encryption card (discontinued and unsupported from PIX OS 6. 520. the rest came with a Pentium processor. identified by PIX OS as a PIX-VAC.com/en/US/products/sw/secursw/ps2120/prod_release_note09186a008059f93b.1 on). the free encyclopedia 6.31/05/2010 Cisco PIX . Supported by the 515. This is a repackaged IRE SafeNet CryptPCI 413-10004 rev 2. and 520. 525. Uses an Intel 21154AC or DEC 21154AB bridge chip.32 bit/33 MHz PCI IPSec Hardware VPN Accelerator Card. Triple DES. It was discontinued and unsupported from PIX OS 6. Uses a DEC 21154BE bridge chip. Based on the Intel Pro/100+ family with the 82557.3 card. 10000. Its part number is 74-1908-01.org/wiki/Cisco_PIX 10/14 .com/en/US/products/hw/vpndevc/ps2030/products_field_notice09186a00800940f4. PIX Classic.3COM 3c590 and 3c595 PCI NICs occasionally found in NTI PIX. there may not be PIX-specific part numbers for these at all. and 535 running PIX OS 6. unmanaged. Based on the Intel 82559 chipset. 510. Accelerates DES. It is manufactured by Productivity Enhancement Products. PIX-PL2 . It uses the Analog Devices ADSP-2141L chip. auto-polarity 4 port switch.0.32 bit/33 MHz 100 Mbit/s SC duplex PCI FDDI card based on the Interphase 5511 FDDI card (PB05511-002). A BIOS upgrade to the latest level of the SE440-BX2 is required. ^ The performance figures cited here are highly changeable. Celeron Mendocino. For PIX-525. as long as the slotket provides a voltage regulator and manual bus speed selector. Tualatin processors can be used. but they will run at lower speeds. The AL440LX may be replaced by a SE440BX-2 motherboard.1 GHz Socket 370 Pentium III Coppermine cpus. ^ Shows flash chips on the 2 MB flash card versus the chips on the 16 MB flash card. The PIX 520 rev A firewalls may use the Intel AL440LX (http://www. starting with the PII 233 and ending with the PII 350. the PCI slot count can be higher or lower than the default if the motherboard is replaced with a different one. it is actually possible to update the 506E to 7. due to clearance issues with the top cover. ^ Older 520s made before February 2000 and with a serial number less than 18025677 shipped with a 2 MB flash card. Using the PowerLeap PL-iP3 converter.cisco. it makes use of either VLAN interfaces (being used by physical interfaces on a remote switch) or the physical interfaces on the switch/router it is installed in.x would only support the 515.1.com/en/US/products/hw/vpndevc/ps2030/prod_eol_notice09186a008032d3af.3(5).2(2). ^ Shows flash chips on the 512KB flash card versus the chips on the 2 MB flash card.cisco. It doesn't have the ability to terminate a VPN connection for remote users. One may also use 133 MHz FSB CPUs. Pentium II Klamath. as long as the cpu uses 2. the free encyclopedia ^ Restricted package / Unrestricted package limits (referred to by Cisco as R and UR/FO/FO-AA. but it will work.wikipedia. while a "stripped-down" version would eventually be released for the 501 and 506e. The Intel-manufactured SE440BX-2 (http://support.x) overrides the PIX BIOS on the flash card (version 3. Newer 520s shipped with a 16 MB flash card [90] (http://www. OS version 5. ^ The WS-SVC-FWM-1-K9 blade only supports IPSec VPN for management. and 535. While not officially supported. which will considerably http://en. ^ In early 2005. Newer models came with a 2MB flash card [91] (http://www.Wikipedia.html) . ^ According to Cisco.com/en/US/products/hw/vpndevc/ps2030/prod_eol_notice09186a008032d39e. unless one is using a PIX 535.6 GHz are possible. The maximum OS version one can run with a 2MB card is 5.1(x). respectively). ^ The WS-SVC-FWM-1-K9 blade has no fixed ports or internal expansion. RAM configurations above 384MB are not supported by Cisco however up to 3x 256MB work for a maximum of 768MB.31/05/2010 Cisco PIX .html) . ^ VAC acceleration vs VAC+ (in parenthesis) acceleration (Implies Unrestricted package). 515e.[8] ^ Cannot be easily upgraded. Cisco indicated that PIX OS 7. Using the bus-speed settings on the Powerleap. the 1000baseSX card is not officially supported by the 515/515e. ^ PIX Classic firewalls with a serial number of 06002015 or lower came with a 512KB flash card. ^ While the PIX 535 boots off of the same ISA flash card as some PIX 510s and 520s (the PIX-FLASH-16MB) its newer on-board PIX BIOS (version 4. as one can upgrade the CPU in the PIX 520 to a 1 GHz Pentium III.com/support/motherboards/desktop/SE440BX2/) ATX motherboard in the 520 can support any Slot1 processor from the Celeron Covington. 525.org/wiki/Cisco_PIX 11/14 . ^ The maximum OS version one can run with a 512KB card is 4.x code by removing all GUI management software. which is found in the 520 rev B.intel. Pentium II Deschutes.0v core voltage and can run on a 66 or 100 MHz fsb. speeds of 1.intel. for example a 933 MHz CPU for 133 MHz FSB will only run at 700 MHz. ^ The PIX 520 received updated PII processors as they became available. and the Pentium III Katmai families.6) at boot. The maximum OS version with a 16MB card is 6. ^ Various models of the 525 use different flash chips.2(4) and higher explicitly does not support the Intel 440FX chipset.com/support/motherboards/desktop/al440lx/) motherboard instead of the SE440BX-2. ^ Since both the 510 and 520 have standard ATX motherboards. probably due to differing production runs. A slotket can also be used to install the newer 500 MHz . Viewing the field notice requires registration [92] (http://www.[9] ^ At least one person has successfully replaced the 506E's Celeron 300Mhz/66Mhz FSB with a Pentium III 600Mhz/133Mhz FSB CPU. this has been substantiated to 1000MHz with a SL5QV 1. ^ It is theoretically possible to upgrade the Socket 8 Pentium Pro processor in the PIX Classic and 10000 with either an Intel Pentium II Overdrive (300 or 333 MHz depending on the system bus speed)[93] (http://www. Cisco.intel. if not all.75V 600MHz (SL5BT).2GHz P3(Tualatin core) is on the photos. http://www.pdf) (PDF).Wikipedia. ^ "Cisco open source license page" (http://www. http://www. although if the motherboard is to be replaced.com/PIX_History/NTI_19941995_files/DataComm_Jan_1995. http://en.766 MHz FC-PGA Coppermine-128 Celeron processor. It is also worthwhile to note that PIX OS later than 5.31/05/2010 Cisco PIX . ^ According to a 2000 field notice. 2. one can use a 533 .powerleap. Upgrading the motherboard to a compatible server-style 440FX board with DIMM slots may allow for the use of the 440FX chipset's theoretical limit of 1 GB of RAM.html.jma.pdf. putting it on a level with the 525 and 535.75V CPU.html) . This mod was done by someone called i8. the free encyclopedia increase its throughput in all of the below categories. both of which are long out of production.com/en/US/docs/security/asa/asa80/license/opensrce.ca/Products/PL-Pro-II. it may arguably be more cost-efficient to upgrade to a SE440BX-2 motherboard with a slocket and Tualatin Celeron CPU. the 60 or 66 MHz bus (no 100 MHz bus) and 72-pin SIMM memory limitations of the workstation-style 440FX board used limit the potential gains in performance to be had from such upgrades.com/pressroom/archive/releases/DP081098.HTM) or a Powerleap PL-Pro/II Celeron adapter[94] (http://www.cisco.html. due to a "procedural error".533 MHz Mendocino Celeron PPGA processor.shtml) . ^ "History of NTI and the PIX Firewall by John Mayes" (http://www.3. Starting with PIX OS 5.65V 600MHz (SL3VH) and 1. It would appear that all 1. Most.com/en/US/docs/security/asa/asa80/license/opensrce.cisco.cisco.1. Only after this feature debuted with the LocalDirector did it come to be included in the later PIX Classics. giving close to 525 specifications. 3. 2008-0128.jma.4 explicitly does not support the 440FX chipset.cisco.com/PIX_History/NTI_1994PIX 506E overclocked specs 1995_files/DataComm_Jan_1995. but an unused or unopened unit within that range would still need the corrective action to be taken.3. PIX 525s with serial numbers 44480380055 through 44480480044 were manufactured with erroneous or omitted EEPROM programming in their 82559 chips that caused the onboard FastEthernet ports to behave erratically when set to fullduplex.htm) . Citations 1. ^ "End of Sale for Cisco PIX Products" (http://www. socket and circuits modification for 1. However. Retrieved 2007-08-21.wikipedia. Coupled with the Powerleap Neo S370 FC-to-PPG adapter.65V to 1.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/qa_eos_for_sale_for_cisco_pix_products_customer. 525s in use today within that range have likely been corrected. the "eeprom update" command will reprogram the defective data and restore normal operation permanently. The Powerleap adapter natively can allow use of a 300 .org/wiki/Cisco_PIX 12/14 .html) . ^ The PIX 525 is known to come with a variety of processors including 1. Retrieved 2008-02-20. [10] ^ Proof of successful overclocking of Cisco Pix 506E with mainboard.75V 100MHz FSB CPUs would work.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/qa_eos_for_sale_for_cisco_pix_products_customer.cisco. ^ The first PIX Classics did not support failover. http://www.com/en/US/partner/products/hw/vpndevc/ps2030/products_field_notice09186a00800949c4. htm. ^ "Cisco PIX 4. ^ "History of NTI and the PIX Firewall by Brantley Coile" (http://home.com/~dealgroup/pix/pix_page_history. Retrieved 2007-06-19. ^ "FAQs for Cisco PFM" (http://www. http://home. Retrieved 2008-07-10. http://s9y.roadrunner. http://www. 7.com/en/US/products/ps6121/products_user_guide_book09186a00806aea58.html) . 5.shtml#nine.pl? message_no=7781&table_type=pix&template=content) Cisco's website for the WS-SVC-FWM-1-K9 (http://www.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63qsg/501quick.com/en/US/docs/security/pix/pix63/pdm30/installation/guide/pdm_ig.com/en/US/docs/security/pix/pix42/release/notes/pixrn420. Retrieved 2007-06-19. 10.com/archives/8-Hackingthe-Cisco-Pix-506E-!. Cisco site detailing what PIX features are/aren't supported by the WS-SVC-FWM-1-K9 (http://www.cisco. http://www.com/PIX_History/NTI_1994-1995_files/Manufacturing_Plan.achtung.com/en/US/products/hw/modules/ps2706/ps4452/index.cisco. ^ "Hacking the Cisco Pix 506E!" (http://s9y.html) Cisco site detailing which hardware is supported by which PIXOS release (http://www.cisco.html.com/pix.com/PIX_History/NTI_1994-1995_files/Manufacturing_Plan.com/archives/8-Hacking-the-Cisco-Pix-506E-!.com/en/US/customer/products/hw/vpndevc/ps2030/products_installation_guide_chapter09186a00803d245f.html#wp11364) .htm) .cisco.cisco. ^ "Notes on PIX production" (http://www.html#wp11364.com/~dealgroup/pix/pix_page_history.cisco.com/en/US/docs/security/pix/pix42/release/notes/pixrn420.cisco.org/wiki/Cisco_PIX 13/14 .cisco.cisco. 9.html) The following links may require a free registration at Cisco's website to view. 6.shtml#nine) . http://www.html) .com/go/pix) PIX Simulator (http://networksims. ^ "Documentation on Cisco PDM" (http://www.html. See also Cisco LocalDirector Cisco SSG6510 External links A basic configuration guide for the PIX (http://www.0 of Cisco's hardware install instructions for various PIX models (http://www.pdf) Cisco's website for the ASA 5500 Series (http://www.com/warp/public/110/41.com/go/asa) Cisco's website for the PIX series (http://www.html) http://en.31/05/2010 Cisco PIX .com/en/US/products/ps6121/products_user_guide_book09186a00806aea58.com/en/US/docs/security/pix/pix63/pdm30/installation/guide/pdm_ig.html) .achtung. 8.cisco.jpg.cisco.roadrunner. http://www.wikipedia.cisco.com/en/US/customer/products/hw/switches/ps708/products_module_configuration_guide_chapter09186a0080394e0a.cisco. the free encyclopedia 4.cisco.jma. ^ "Documentation on Cisco ASDM" (http://www.cisco.jpg) .2 release notes" (http://www.html) Version 7.com/cgi-bin/message_more.Wikipedia.html. Retrieved 2007-06-19.jma.com/warp/public/110/41. http://www. the free encyclopedia Retrieved from "http://en.wikipedia. a non-profit organization.org/wiki/Cisco_PIX" Categories: Cisco products | Computer network security | Server appliance This page was last modified on 19 May 2010 at 12:34.Wikipedia..org/wiki/Cisco_PIX 14/14 . See Terms of Use for details. Privacy policy About Wikipedia Disclaimers http://en.wikipedia. additional terms may apply.31/05/2010 Cisco PIX . Inc. Wikipedia® is a registered trademark of the Wikimedia Foundation. Text is available under the Creative Commons Attribution-ShareAlike License.