Customer Reviews

Cisco Secure PIX Firewalls

5 star:		(9)
4 star:		(6)
3 star:		(9)
2 star:		(1)
1 star:		(4)

 

 

I'd worked with a variety of Cisco equipment, both WAN routers and LAN switches and L3 switch/routers over the past six years and I found the PIX security model and command set somewhat confusing, so I bought this book because it was the only book about the PIX that I could find.

Boy, was I disappointed -- confusing examples, outdated information, missing information, non-relevant filler, this book couldn't have gottten much worse.

The book assumes through almost all the examples that you will be NAT translating your addresses, and spends most of its time explaining configurations that use NAT and almost no time with non-NAT configurations. It's left to the reader to guess at whether commands like "static" even apply to non-nat connections.

Cisco themselves in at least PIX 6.1(1) have deprecated the conduit and outbound commands in favor of access-group and access-list commands. For a book with a copyright of 2002 and written by cisco, there is no mention of access-list/group commands at all and all the examples use conduit/outbound -- this is inexcusable.

There was also no mention in the book of the poorly documented process for updating licensing keys for the PIX, either. This would have been a valuable, step-by-step addition. PIX hardware was absent from any discussion in this book as well.

Furthermore, there's an entire chapter devoted IOS firewall commands, which, while a nice freebie, seems like it was thrown in to bulk up a pretty thin book.

I suppose I got something out of reading the book, but certainly not the book's asking price. I've found the usual online docs at Cisco more valuable, especially for 6.1(1).

I just started working on PIX firewalls two months ago when our senior engineer quit. I thought all along he knew what he was doing. After reading through this book though, it's clear he was bluffing and having Cisco TAC do the configuration for him.

This book has allowed me to understand all the things my predecessor did WRONG and correct them.

Though I am a CCNP & CCDP, I found myself completely unprepared for the bizarre syntax the PIX throws at you.

I recommend this title to anyone like myself who is starting off on the PIX and trying to figure out which way is up.

Sometimes its hard to find all the info that you need to effectively operate and understand what the PIX can do for an enterprise.

A lot of the knowledge that I've gained about the PIX has been from scattered sources, this book is pretty good at getting all that information together.

A close second(in terms of information) to this book is the Configuration Guide that comes with the PIX.

The book is pretty well written, easy to read and it is only about 300 pages. For those of you who are used to reading the 600 page books that Cisco Press puts out, this one can be considered light reading.

I'm currently re-reading it a second time, in preparation for the exam. I've tried the Boson tests along with the book and they seem to be a good combo.

Even if you are not planning on taking the exam, I recommend this book. The examples given may be a bit simplestic, but they drive the point home. As a day-to-day reference, you may also want to supplment the book with info from CCO.

What I have found over the past several months is that a firewall is more important than I first thought. I have found that keeping unwanted traffic and visitors out is certainly more important than most people know or understand.

Working with Cisco routers there is really only one choice for firewalls and that is PIX, this 350 page book gives a first hand use, configuration and maintenance look at the PIX Firewall. Beginning with network security and moving to PIX software and hardware. You'll then work with the upgrading the PIX Software.

Next comes the configuration of PIX and ASA security levels commands. I found the firewall translation in both static and dynamic configurations, which include NAT and PAT, to be very useful in what I am doing currently.

Finally topics like firewall access, authentication, advanced protocol handling, like FTP and RTSP, attack guards, IPSec and proxy configuration round out one of the best books I have ever read. There is also labs and case studies to work with and if they developed and eSim to go with this there no telling how big it would be. Overall excellent.

Cisco Secure PIX Firewalls is an excellent book for those needing PIX technical reference. The book is not a definitive text on PIX firewalls, but is definitely a good starting point.

The book provides a methodical overview of how to use a PIX. It has a brief introduction into various firewall architectures, and then dives into installing the software and hardware and software configuration.

This version of the book is getting a bit dated and a new edition should be considered.

On the downside, the truth is that the PIX documentation, and information from the Cisco web site, covers about 90% of the information in the book.

For those that want to save $$$, they can simply print out the PIX documentation, and save their money.

But for those that don't have an actual PIX appliance or access to the PIX documentation, Cisco Secure PIX Firewalls is a very good reference for learning the rudiments of the functionality of a PIX firewall.

These guys do know what they are talking about, but they just did not talk enough about the PIX and configuring it. What happend to PDM? This is a great tool, thats been out since v6.0, but only a one line reference to it.

I am reading the Cisco Router Field Manual, and that thing is great. Basically it goes step by step on each command required (or optional) to configure a device, or setting.

This PIX book had potential, but it just needed more detail, and to be a lot longer. I would recommend the cisco online docs. They are great, and actualy go into more detail that the book.

This book came just in time. I work for a Cisco Reseller and we had to get someone up to CSS-1 certification fast. The PIX Advanced exam was the only one I hadn't passed. Thank goodness I found this book. I scored 860 and am now a Cisco Security Specialist 1. I refer to it frequently, as I don't get to configure many PIXes.

As you can expect from an "Official" book, this one is somewhat limited. It does provide a good intro to most of the commands and how to configure a pix for secure use. It is quick and concise. If that is what you need, then this will work.
However, some of the info is outdated and it does not cover the different versions/abilities of the PIX FOS. For example, it covers conduits but has no discussion of access-lists. Since Cisco is discontinuing conduit commands, this dates the book.

However, it is a decent referrence for most commands, and I guess it contains the info it does due to it being a cuorse book for the CQS-I Exam it is ok.
But if you really want an in depth coverage of PIX and the FOS then I recommend "Cisco PIX Firewalls" by Deal.

I used this book as a final prep tool for the CSPFA exam and saw quite a few topics on the exam that were barely mentioned in the book. Fortunately, I have enough experience with the PIX that I was able to answer them correctly. I would not use this book as my sole prep tool for the exam. For instance, the "outbound" command is mentioned once in the book, but did not even explain it fully. I did have the "outbound" command come up on the exam. Also, the book does not cover ACLs at all. It does a good job of covering conduits (which are being replaced by ACLs now). The book she be more up to date on the use of ACLs.

This book must have been written before access-lists were implemented into PIX OS because it does not cover that. It covers conduits, which Cisco has replaced with access-lists. Also, the book contains a lot of command syntax and it's my impression that I could have got the same information by going through the PIX documentation on Cisco's site. This may have been a good book a while ago but I don't really recommend it at this point because it's outdated. I also find myself refering to it sometimes and always go back to online documentation to find what I need.