Cisco PIX Firewall Analysis Tool

ZoomPIX is a perl script to analyse Cisco PIX firewall configuration files. Cisco PIX firewall configurations can be very hard to read and interprete once they have a given length or complexity. ZoomPIX generates a html-report of the core content of the PIX configuration in a format easy to read and understand. Complexity is one of the worst enemies of security, hence this script helps to make sense out of Cisco PIX configurations.

The report contains:

• Interfaces summary:
  Overview of all interfaces with IP addresses, attached ACLs (Access Control List) and security level, and interface state.
• Access Control List (ACL) summary:
  Overview of all found ACLs, eg. list of ports, table of ACL entries highlighed by IP range.
• Access Control List (ACL) report:
  Easy to read table of all ACLs with mode (permit/deny), protocol, source/destination IP addresses, port definitions and risk level.

Samples

• A sample report generated by ZoomPIX.