PIX 501

[stimpyman77]

Hello everyone,

I just became the lucky owner of a PIX 501 firewall and my question is how do I go about updating to the latest IOS for the device. It seems that you have to have an account with Cisco to do this? Is that correct? or am I missing something?

Thanks!

 

[Cooky]

Yes you have to have support contract to be able to download new versions of code.
By the way, Pix & ASA firewalls don't run IOS. They run security appliance software.
Pix 501's can only run up to 6.3.5, so if your code is somewhat close to it you should be good.

 

[stimpyman77]

Thanks for the fast reply Cooky! It is currently running version 6.1(3). Do you think I will still be ok?

 

[Worthington]

depends on what you are trying to do. A lot of features have been implimented since the 6.1.(X) days. I'm sure it will work but if your using it as a training tool you'll find things to be a little different when you see a current PIX.. even one running the 6.3 vs 7.

Can't remember for sure but I think access was determined by conduit rules in 6.1.. those were changed to the more familiar access-lists in later releases (just as an example).

 

[stimpyman77]

Thanks for the info Worthington! I was doing some reading and found that there are some vulnerabilities in version 6.1(3) that have been fixed in more recent versions and also that the ports are now upgraded to 10/100 as seen here. I would be using this as the core firewall on my home network. I am just in the habbit of trying to make sure I am all patched up when connecting something to the net. Since this model is retired, is it worth purchasing a contract to get the latest code? or is asking a VAR or someone to download it for me be bad karma?

Thanks for the help..

 

[jlazzaro]

depends on how its worth to you. me, i wouldnt buy a contract just to get the code...

Originally posted by: stimpyman77
or is asking a VAR or someone to download it for me be bad karma?

bad karma? maybe. illegal? yes. maybe someone reading this post will ablidge...

 

[stimpyman77]

Thanks jlazzaro,

You are probably right, not worth it. I would be better off upgrading to a more current device. It will still serve to learn on though.. so I guess it's not that bad.

Thanks for all the help everyone!