A. Sure enough, the instructions to update PIX firewalls to the most recent IOS version begin by describing the disk-drive setup. (The Cisco Secure PIX Firewall 520 has a 3.5" disk drive, but the vendor is phasing out that product.) I don't know whether you can use Cisco Secure PIX Firewall 515's USB port to attach a disk drive and then follow the directions, but I do know that you can skip this setup step altogether. Instead, proceed as follows:
- Download the latest IOS version from http://www.cisco.com. (You can access the software download section only when you have a Cisco Connection Online—CCO—account.)
- Place the update file (i.e., pixxxx.bin) on a Trivial File Transfer Protocol (TFTP) server.
- Connect to your Cisco Secure PIX Firewall 515 through Telnet or through a terminal session.
- Boot the machine. When the system prompts you to press
to interrupt the boot process, press Esc and stop the boot. (When the flash is complete, the PIX will reboot.)
- Enter the IP address of the PIX's NIC, as follows:
- Enter the IP address of the TFTP server, as follows:
- Enter the filename for the updated IOS version, as follows:
- To begin the download, type
The PIX supports PPTP, but the VPN 3000 client won't work in Win2K. However, Cisco is working on a new VPN client that the company claims will be available by the time you read this.