After attending the Cisco Security Seminar in Chicago just last month, their interpretation of Centri was just as Abe mentioned. It is an alternative to the PIX, which to date has never been compromised by anyone. I am a die-hard skeptic as well per new "Secure" devices, but I have installed quite a few PIX boxes in the field for many clients, mostly banks, and have yet to find a security hole. If Mr. Sutherland did find a security hole in the PIX, it would be beneficial to have the method/procedure/software documented and posted to this list.
Micro Computer Solutions, Inc.
>>> Abe Singer <Abe .
com> 03/26 3:30 AM >>>
At 08:29 -0800 3/25/98, Chris Sutherland wrote:
>This is true. But Cisco also purchased Centri for the specific purpose of
>front-ending on the PIX. My point was that this shows that Cisco themselves
>see the PIX box as being inadequte unto itself.
Um, Cisco promotes Centri as a low-cost alternative to PIX, not a "front-end"
>Not really - i'm just a die-hard sceptic. And i have also penetrated the
>PIX box when last i talked to a cisco rep it had "never been penetrated."
>That kind of statement is inappropriate imho.
Would you like explain the circumstances under which you did this? I'd
certainly like to know more about it.
Abe Singer | Voice: (619) 552-6672
| Fax: (619) 593-6994
Virtual Integrators, Inc. | Internet: Abe .