Can any one suggest any Service Improvement Plans (Security/Vulnerability/Performance) for PIX/ASA/Checkpoint firewalls ?
We have to give Service Improvement Plans (Security/Vulnerability/Performance) for PIX/ASA/Checkpoint firewalls to the customer infrastructure which help them in there overall device performance. Example:- 1.) SSH version 1 to upgrade version 2 in PIX/ASA . 2.) ACL fine optimization. 3.) Disable control connection in Checkpoint. 4.) Configuring stateful failover. 5.) Removing Fixup protocol SIP (fixup protocol sip 5060) Any other suggestion will be Welcome.