Factory Default Configurations

The default configuration of the PIX is dependent on the model of firewall you have. The PIX 501 and 506E both come with basic configurations designed for SOHO and ROBO environments. The PIX 515E, 525, and 535 have no basic configuration settings; apparently Cisco figures that if you buy an expensive firewall then you had better know how to configure it!

Cisco PIX 501 and 506E Default Settings

Both models are ready right out of the box, with the following configurations set to their default settings. Tables 4.1 and 4.2 display the inside and outside default configuration settings.

Table 4.1. Ethernet 0 (Outside)

Configuration	Setting
Interface name	outside
Security level
DHCP	client

Table 4.2. Ethernet 1 (Inside)

Configuration	Setting
Interface name	inside
Security level	100
IP address/subnet mask	192.168.1.1 255.255.255.0
DHCP	Allows clients to automatically obtain an IP address from the PIX

The traffic flow is set to the default, which means that traffic is allowed to travel from the inside (100) to the outside (0) normally. Any traffic from the outside (0) to the inside (100) is not allowed, however. The enable password is blank, and the Telnet password is cisco , all lowercase.