| Overview

This module will introduce the concept of the network firewall. The firewall exists to enforce the enterprise security. It enables a company to do business online, while providing the necessary security between the internal network of the enterprise and an external network. In addition to access control, the firewall also provides a natural focal point for the administration of other network security measures.

Once the student is comfortable with the concept of firewalls, the Cisco PIX Security Appliance will be introduced. This will include an overview of the various PIX Security Appliance models, their features, and their capabilities. Although the PIX Security Appliance is not a router, it does have certain routing capabilities. As a result, the commands used in the basic configuration of the PIX will also be covered.

Finally, the student will learn about the PIX Security Appliance DHCP client and server capabilities. Without a DHCP server on the network, IP addresses must be manually entered on each computer or device that requires an IP address. The PIX Security Appliance can provide clients with this information. As a DHCP client, the PIX Security Appliance is able to obtain an IP address, subnet mask, and an optional default route from an existing DHCP server, which is typically located at the service provider network. Additionally, lab activities will give students more experience configuring the PIX Security Appliance as a DHCP server.

NOTE: It is required that the student study the commands covered in the chapter using the labs and the command reference. Not all required commands are covered in sufficient detail in the text alone. Successful completion of this course requires a thorough knowledge of command syntax and application.