Auditor Help: Identifying Cisco PIX Devices

The software needs to have a device or devices defined with which to connect and document. You must have access to and adequate access privileges on the devices you wish to document.

To specify a Cisco PIX device:

  1. In the Select Devices dialog box, click the New... button.
    Specify Node dialog box
  2. In the Node Specification dialog box, enter the IP Address or Hostname of the device to be documented. This field is required for both SSH and Telnet connections.
  3. Check the Use SSH option if you would prefer to connect using a secure and encrypted connection for the data.
    Data is extracted from a device using either a Secure Shell (SSH) or a Telnet connection. The SSH feature enables the software to establish a secure, encrypted connection to the system. If this box is not checked, the connection is established with Telnet in clear text.
    Note! Note: Only some versions of Cisco IOS software support the SSH server feature. If you have not explicitly enabled the SSH server on this device, do NOT check this box.
  4. Enter the Username.
    Devices may be configured to grant access based on username authentication. If a Telnet session to the specified device requires a username, fill in a username that is allowed access to Privileged EXEC Mode. If access to the device is not based on username authentication, leave this field blank. This field is required for an SSH session.
  5. Enter the Login Password.
    This password is sometimes referred to as the telnet password, username password, line password, or VTY password. If a Telnet session to the specified device requires a password, enter a valid password here. This field is required for an SSH session.
  6. Enter the Enable Password.
    The software requires access to Privileged EXEC Mode. If this mode is accessed via the enable EXEC command and enable password is configured, enter the password here.
  7. If the following items have been modified on the device you've selected, modify the Username Prompt, Login Password Prompt, and/or the Enable Password Prompt.
    Note! Notes:
    • Username Prompt:
      Devices may be configured with non-standard prompts. The username prompt is displayed when logging into the device. This prompt applies only to Telnet sessions. Change this value ONLY if the device is configured with a non-standard Username Prompt.
    • Login Password Prompt:
      Devices may be configured with non-standard prompts. This prompt is displayed when logging into the device to obtain a password. This prompt applies to both Telnet and SSH sessions. Change this value ONLY if the device is configured with a non-standard Login Password Prompt.
    • Enable Password Prompt:
      Devices may be configured with non-standard prompts. This prompt is displayed when logging into the device and when executing the enable EXEC command. This prompt applies to both Telnet and SSH sessions. Change this value ONLY if the device is configured with a non-standard Enable Password Prompt.
    • Connection Method:
      Devices may be configured with an alternate connection method. The Ecora default is PUTTY, but the path to a third-party solution can be entered here.
    • Arguments:
      Particularly if an alternate connection method is specified, there may be arguments necessary for Ecora to connect. Enter the correct arguments here.
  8. Click OK.
  9. Proceed with selecting for Cisco PIX for the report.

Note! Note: The authentication required by your device configuration dictates which of the above fields are required. The data your system requires for access must be correctly provided in the dialog box to collect data.

Note! Note: Incorrect characters, such as white space at the end of a correct prompt, prevent the software from matching the actual prompt and connecting successfully.