Cisco Systems, Inc.
All contents are Copyright © 1992–2003 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 6 of 10
Interface name as
address in ACLs and
conduits
• Enables the creation of security policies based on interface name instead of IP address,
which is especially useful in broadband environments where the outside interface is
typically assigned a dynamic IP address
Custom administrative
access banner
messages
• Provides facility to define custom messages that will appear when anyone attempts to
access the CLI interface, after successful login and when entering “exec mode” of Cisco
PIX Security Appliances via console port, telnet, or SSH
Console connection
inactivity timeout
• Protects console from unauthorized administrative access by automatically logging out
sessions after a configurable period of inactivity
Show command
output filter
• Provides tools to customize the output of CLI-based show commands, such as filtering
using Cisco IOS Software style regular expressions
Custom logging
identifier
• Allows a custom firewall identifier to be selected, such as an interface IP address,
that will be included in all syslog messages to improve the centralized reporting of
firewall events
Remote management
enhancements
• Supports secure remote management of Cisco PIX Security Appliances through a
VPN tunnel to their inside interface IP address; especially useful in broadband
network environments where firewalls outside interface addresses are typically
assigned dynamically
Small Office and Home Office
Easy VPN Remote
(hardware VPN client)
enhancements
• Introduces ability to authenticate individual users behind aCisco PIX Security Appliance
through an easy-to-use, Web-based interface with support for standard and one-time
passwords (including authentication tokens)
• Allows certain network devices, such as printers and IP phones, to pass through a VPN
tunnel using authentication based on the devices’ Media Access Control (MAC)
addresses and/or their IP addresses
• Provides robust client-side VPN resiliency with support for dynamic downloading of
backup Easy VPN Server information and automatic failover, in the event of a VPN
link failure
• Supports VPN 3000 Series Concentrator load balancing with automatic redirection to
the least utilized concentrator
• Provides new, easy-to-use Web interface for manual VPN tunnel control, user
authentication, and tunnel status information
• Introduces method to specify the networks and individual IP addresses that can manage
a Cisco PIX Security Appliance securely via its outside interface, regardless if the VPN
tunnel is up or down
DHCP relay • Forwards DHCP requests from devices on specific interfaces to an
administrator-specified DHCP server
• Provides method for enterprises to centrally distribute, track, and maintain IP addresses
PAT for Point-to-Point
Tunneling Protocol
(PPTP)
• Enhances the rich PAT functionality in Cisco PIX Security Appliances to enable multiple
PPTP sessions to traverse firewall
PAT for IPsec • Supports IPsec passthrough services, enabling a single device behind the Cisco PIX
Security Appliance to establish a VPN tunnel through the firewall to a VPN peer
Table 1 New Features and Benefits
Key Features Benefit
