mà chúng tôi hy vọng sẽ vượt quá mong đợi của bạn. Solutions@ là một kho tàng tương tác của các thông tin hữu ích, tập trung vào các chủ đề cuốn sách của chúng tôi và công nghệ liên quan. Trang web cung cấp các tính năng sau đây: tôi bảo hành một năm đối với nội dung lỗi thời do nâng cấp sản phẩm của nhà cung cấp. | Advanced PIX Configurations Chapter 10 365 Summary The Cisco PIX firewall is an advanced product and has many different options for supporting various application-layer protocols as well as protecting against network-layer attacks. It also supports content filtering for outbound Web access intrusion detection various routing options such as RIP and stub multicast routing and DHCP server and client functionality. Many protocols embed extra IP address information inside the exchanged packets or negotiate additional connections on nonfixed ports in order to function properly. These functions are handled by the PIX application inspection feature also known as fixup . PIX supports FTP clients and servers in active and passive modes DNS RSH RPC SQL Net and LDAP protocols. It also supports various streaming protocols such as Real-Time Streaming Protocol NetShow and VDO Live. Another set of supported protocols includes all SCCP and SIP all used in VoIP PIX monitors passing packets for the embedded information and updates its tables or permits embryonic connections according to this information. It is also able to NAT these embedded addresses in several cases. Content filtering features on the PIX can be used to enforce a company s acceptable use PIX can interface with Websense or N2H2 servers and deny or allow internal clients to access specific Web PIX is also able to filter out Java applets and ActiveX code from incoming Web pages to protect clients against malicious code. For SOHO environments the PIX firewall provides DHCP server and client functionality although server capabilities are rather limited. DHCP server supports a couple of specific options that are used by Cisco IP Phones. Other useful PIX features include support of stub multicast routing and PPP over Ethernet client capabilities. It also supports RIPvl and v2 including authentication and multicast updates for v2. Finally the PIX has
