Cisco Pix 501 V6.3 50 user Internet Firewall Router

pixfirewall> ___________________________________________________________________________________ 

The Cisco PIX 501 Firewall is a purpose-built

security appliance that provides rich security

services including stateful inspection firewalling,

virtual private networking (VPN) and intrusion

protection in a single device. Using the Cisco

state-of-the-art Adaptive Security Algorithm

(ASA) and PIX operating system, the PIX 501

ensures that all the users behind it are safe and

secure from threats lurking on the Internet. Its

powerful stateful inspection firewall technology

keeps track of the state of authorized users’

network requests and prevents unauthorized

network access. By leveraging the flexible access

control capabilities of the PIX 501, administrators

can also enforce customized policies on network

traffic traversing through the firewall.

The Cisco PIX 501 Firewall can also secure all

network communications from remote offices to

corporate networks across the Internet using its

standards-based Internet Key Exchange (IKE)/IP

security (IPsec) VPN capabilities. By encrypting

data with 56-bit Data Encryption Standard (DES)

or optional advanced 168-bit Triple DES (3DES)

encryption, prying eyes cannot see your sensitive

corporate data as it safely travels across the

Internet.

The integrated intrusion protection capabilities of

the PIX 501 can protect your network from many

popular forms of attacks. Looking for over 55

different attack "signatures," PIX keeps a vigilant

watch for attacks and optionally blocks them or

notifies you of them in real time.

By packing all the same security features found in

the Cisco high-end gigabit PIX Firewalls, the PIX

501 provides the rich protection that all

broadband users look for in an easy-to-use and

easy-to-deploy solution.

Cisco Systems

Copyright © 2001 Cisco Systems, Inc. All Rights Reserved.

Page 2 of 6

The Cisco PIX 501 Firewall provides a convenient way

for multiple computers to share a single broadband

connection via its integrated, high-performance four-port

10/100-Mbps switch. Furthermore, Cisco PIX Firewalls

provide Network Address Translation (NAT) and Port

Address Translation (PAT) features to hide the actual

network addresses of devices on your network. Users can

also enjoy plug-and-play networking by taking advantage

of the built-in Dynamic Host Configuration Protocol

(DHCP) server within PIX, which automatically assigns

their computers network addresses when they are

powered on. The Cisco PIX 501 Firewall provides the

features necessary to seamlessly integrate into most

broadband networking environments.

The PIX 501 is a reliable, easy-to-maintain platform that

provides a wide variety of methods for configuring,

monitoring and troubleshooting it. PIX management

solutions range from an integrated, Web-based

management tool to centralized, policy-based

management tools to support for remote monitoring

protocols such as Simple Network Management Protocol

(SNMP) and syslog.

PIX Device Manager (PDM) provides an intuitive,

Web-based interface for administrators to easily configure

and monitor a PIX 501, without requiring any software

(other than a standardWeb browser) to be installed on the

administrator’s computer.

Administrators can also remotely configure, monitor and

troubleshoot the PIX 501 using its command-line

interface (CLI) through a variety of methods including

Telnet, Secure Shell (SSH) and out-of-band access via the

console port.

A large number of PIX 501 Firewalls can also be easily

remotely managed using Cisco Secure Policy Manager

(CSPM) 3.0, available within the Cisco VPN/Security

Management Solution (VMS). CSPM 3.0 is a scalable,

next-generation centralized management solution for PIX

Firewalls that includes features such as a task-based

interface, interactive network topology map, policy

wizards, policy import capabilities, and much more.

general purpose operating systems

• Cisco quality and no moving parts provide a highly reliable security platform

• Provides perimeter network security to prevent unauthorized network access

• Uses state-of-the-art Adaptive Security Algorithm (ASA) for robust stateful inspection firewall

services

• Provides flexible access-control capabilities for over 105 predefined applications, services and

protocols, with the ability to define custom applications and services

• Includes numerous application-aware "fix-ups" that secure advanced networking protocols such as

H.323, SIP, Skinny, RTSP and more

• Includes content filtering for Java applets and ActiveX controls

• Ensures data privacy/integrity and strong authentication to remote networks over the Internet

• Supports 56-bit DES and 168-bit 3DES data encryption to ensure data privacy

Cisco Systems

Copyright © 2001 Cisco Systems, Inc. All Rights Reserved.

Page 3 of 6

malformed packet attacks to denial-of-service (DoS) attacks

• Integrates with Cisco Network Intrusion

• Detection System (IDS) sensors for the ability to dynamically block/shun hostile network nodes via

the firewall

RADIUS support

• Supports SCEP-based enrollment with leading X.509 solutions from Baltimore, Entrust, Microsoft

and VeriSign

• Supports the broad range of Cisco AVVID (Architecture for Voice, Video and Integrated Data)

partner solutions that provide URL filtering, content filtering, virus protection, scalable remote

management, and more

• Provides ability to physically secure the PIX 501 using a standard notebook security cable lock (lock

not included)

• Provides convenient, high-speed networking environment for small office environments in a single

compact platform

• Auto-MDIX support eliminates the need to use crossover cables with devices connected to the

switch

• Provides IP addresses to devices on inside network of the firewall

capabilities

• Allows multiple users to share a single broadband connection using a single public IP address

• Intuitive Web-based GUI enables simple, secure remote management of PIX Firewalls

• Provides wide range of informative, real-time, and historical reports which give critical insight into

usage trends, performance baselines, and security events

• Provides scalable, consistent management of entire Cisco PIX Firewall product line throughout an

enterprise using CSPM’s robust policy management infrastructure

additional training

• Accessible through variety of methods including console port, Telnet and SSH

management applications

Cisco Systems

Copyright © 2001 Cisco Systems, Inc. All Rights Reserved.

Page 4 of 6

The Cisco PIX 501 Firewall 10-user license supports up to

10 concurrent source IP addresses from your internal

network to traverse through the PIX 501. The integrated

DHCP server supports up to 32 DHCP leases.

The Cisco PIX 501 Firewall 50-user license supports up to

50 concurrent source IP addresses from your internal

network to traverse through the PIX 501. The integrated

DHCP server supports up to 128 DHCP leases. As your

needs grow, a 10-to-50 user upgrade license is also

available, which allows you to extend your investment in

PIX 501 equipment.

The PIX 501 has two optional encryption licenses

(168-bit 3DES and 56-bit DES) available either at the time

of ordering the appliance, or as an upgrade that can be

purchased later. Note that US export restrictions may

apply to these licenses.

Cleartext throughput: 10 Mbps

Concurrent connections: 3500

56-bit DES IPsec VPN throughput: 6 Mbps

168-bit 3DES IPsec VPN throughput: 3 Mbps

Simultaneous VPN peers: 5*

* Maximum number of simultaneous VPN/IKE Security Associations (SAs)

supported

Operating

Nonoperating

Input

Output

usage (5 W)

15.875 x 13.97 cm)

100 switch, RJ45

Products bear CE Marking indicating compliance with

the 89/366/EEC and 73/23/EEC directives, which

includes the following safety and Electro Magnetic

Compatibility (EMC) standards.

UL1950, CAN/CSA-C22.2 No. 60950-00, IEC60950,

EN60950

EN55022 Class B, CISPR22 Class B, AS/NZS 3548 Class

B, VCCI Class B, EN55024, EN50082-1, EN61000-3-2,

EN61000-3-3

Cisco Systems

Copyright © 2001 Cisco Systems, Inc. All Rights Reserved.

Page 5 of 6

Support services are available from Cisco Partners as well

as from Cisco. Cisco SMARTnet service augments

customer support resources. It provides 24x7x 365 access

to technical resources, both on line and via telephone, the

ability to download updated system software, and

hardware advance replacement.

(chassis, latest PIX software,

10-user and DES licenses,

integrated 4-port 10/100 switch and

10BaseT port)

(chassis, latest PIX software,

10-user and 3DES licenses,

integrated 4- port 10/100 switch

and 10BaseT port)

(chassis, latest PIX software,

50-user and DES licenses,

integrated 4- port 10/100 switch

and 10BaseT port)

(chassis, latest PIX software,

50-user and 3DES licenses,

integrated 4- port 10/100 switch

and 10BaseT port)

license, integrated 4-port 10/100

switch and 10BaseT port

PIX 501

service for PIX 501 10-user

bundle

for PIX 501 10-user bundle

for PIX 501 10-user bundle

for PIX 501 10-user bundle

service for PIX 501 50-user

bundle

for PIX 501 50-user bundle

for PIX 501 50-user bundle

for PIX 501 50-user bundle

service for PIX 501

configurable chassis

for PIX 501 configurable

chassis

for PIX 501 configurable

chassis

for PIX 501 configurable

chassis

For more information about Cisco PIX Firewalls, go to

http://www.cisco.com/go/pix

For more information about PIX Device Manager (PDM),

go to http://www.cisco.com/warp/public/cc/pd/fw/

sqfw500/prodlit/pixdm_ds.pdf

For more information about Cisco Secure Policy Manager

(CSPM), go to http://www.cisco.com/go/policymanager

For more information about Cisco VPN/Security

Management Solution (VMS), go to

http://www.cisco.com/warp/public/cc/pd/wr2k/vpmnso/