Lost passwords on from a Cisco ASA firewall can be recovered without having to re-image the device. This procedure will only work when running version 6.0 or older, you can not recover a password from a 5.0 version. The third method can be used if you lock out due to AAA settings.

Method A – Password Reset Using a Command
1. Use the command hw-module module <module_num> password-reset in the Cisco ASA CLI.
A. Example – ciscoasa(config) #hw-module module 1 password-reset
B. Reset the password on module in slot 1?
C. Confirm

Method B – Password Reset Using ASDM
1. Open the Cisco Adaptive Security Device Manager (ASDM).
2. In the Tools dropdown list select IPS Password Reset (for aip-ssm)
3. In the Tools dropdown list select CSC Password Reset (for csc-ssm)

Method C – Password Recovery Using ROMMON from a lock out
1. During startup of the security appliance, Press ESC when prompted to enter ROMMON
2. The following command will have the appliance ignore the startup configuration.
A. Rommon #1> confreg
B.The current configuration register will be shown followed by a prompt to change
the configuration, write down your current value to use later and type {y} and press {enter}
C. Keep all settings except “Disable System Configuration?” for that enter {y} and press {enter}
D. Reboot the appliance by typing rommon #2> boot
3. Type in hostname> enable to enter privileged EXEC mode.
4. You will now be prompted for a password press {enter}
5. Type in hostname# copy startup-config running-config
6. Type in hostname# configure terminal to enter global configuration mode
7. To change the password type in the following
A. Hostname(config) # password <enter password>
B. Hostname(config) # enable password <enter password>
c. Hostname(config) # username <enter name password password>
8. Type in hostname(config) # config-register <value written down from step 2b>
9. Type in hostname(config) # copy running-config startup-config

Article written by MyComputerAid.com

Post from: MyComputerAid.com Computer support

Recover password from Cisco ASA firewall

Password recovery on Cisco PIX firewalls differs depending on whether a floppy drive is present or not. To recover a password from a Cisco PIX firewall, you will need about ten minutes of downtime and the items from the list below. Once these items are obtained one of the procedures below can be followed to recover a password.

PIX Lockout Utility (which includes the following)
np70.bin (7.x and 8.0 release)
np63.bin (6.3 release)
np62.bin (6.2 release)
np61.bin (6.1 release)
np60.bin (6.0 release)
np53.bin (5.3 release)
np52.bin (5.2 release)
np51.bin (5.1 release)
np50.bin (5.0 release)
np44.bin (4.4 release)
nppix.bin (4.3 and earlier releases)
rewrite.exe (needed only for PIX machines with a floppy drive)
TFTP Server Software (needed only for PIX machines without a floppy drive) TFTP server software is no longer available from Cisco.com, but you can find many TFTP servers by searching for “tftp server” on the Internet. Cisco does not specifically recommend any particular TFTP implementation.

Method One – With a Floppy Drive:
1. Load the rewrite.exe file.
2. Follow the on screen directions and answer all questions using the correct password recovery file.
3. On PIX console port, install a serial terminal.
A. Or a PC with terminal emulation software.
4. Verify a connection with the PIX, and characters are sent between the terminal and the PIX
A. If you are locked out, you will only see a password prompt.
5. Insert the PIX Password Lockout Utility disk into the drive.
6. Push the Reset button on the front of the PIX. The PIX reboots and you should see this message:
Erasing Flash Password. Please eject diskette and reboot.
7. Eject the disk and press the Reset button.
8. When prompted for a password press [enter].
9. The default password at this point is “Cisco” with no default enable password.
10. In configuration mode, type the following command password <password> .
11. Type in enable password <password>.
12. Save this configuration, you have now set the Telnet and enable passwords.

Method Two – Without a Floppy Drive:
1. Follow steps One and Two from Method One.
2. Power on the firewall at the startup message press the [esc] key.
3. Type monitor> interface for floppiless PIXes the monitor command defaults to the inside interface.
4. Type monitor>address and specify the IP address of the PIX Firewall’s interface.
5. Type monitor>server and specify the IP address of the remote TFTP server containing the PIX
password recovery file.
6. Type monitor>file and specify the filename of the PIX password recovery file.
7. Type monitor>gateway
A. specify the IP address of a router gateway through which the server is accessible.
8. Type monitor>tftp and start the download.
9. Press [y] when asked to erase passwords.
10. Now follow steps 8 to 12 from the first Method.

Article written by MyComputerAid.com

Post from: MyComputerAid.com Computer support

Recover password from a PIX firewall

Cisco PIX is being replaced by ASA firewalls for a number of reasons. The main reason being that even though PIX was a breakthrough firewall during its time, its technology is becoming more and more outdated. Stateful packet filtering alone is not enough to protect an entire network anymore.  Security risks such as viruses, phishing, application-layer attacks, and worms are becoming harder and harder for the PIX series of firewalls to handle.

The Cisco ASA firewall has a feature referred to as Anti-X, meaning it protects against a variety of different threats. Granted, an organization can have a PIX acting as their stateful packet filtering appliance and have other appliances doing the other necessary security jobs; however more often then not this is not cost effective. The ASA series is basically a PIX except it includes other features that make it more like an all in one, most notably  the Content Security and Control Security Service Module (CSC-SSM). Cisco ASA firewalls generally cost less than the Pix firewalls and are better for protecting against multiple threats.

Article written by MyComputerAid.com

Post from: MyComputerAid.com Computer support

Cisco PIX vs ASA

Cisco PIX firewall is an older technology that is currently being replaced by ASA firewalls. PIX firewall is a dedicated firewall that does not serve any other purposes such as a sensor or a concentrator, as the ASA firewalls do. Cisco PIX firewall models come in the 500 series of appliances and the most popular one is the PIX 501 firewall for homes and small businesses. Larger businesses generally migrate toward the PIX 515 firewall.

All Cisco PIX firewalls run the PIX operating system, which is based on the IOS but more complicated. This can create a lot of problems for users who are familiar with Cisco IOS in that is causes frustration when working with the PIX operating system. The PIX firewall features a PIX device Manager (PDM) for a user friendly and intuitive interface. The GUI is actually a Java application downloaded through the web browser. Most commonly, PIX firewalls have outside interfaces that connect to the inside of a router and through a public Internet. Additionally, it has an inside interface that connects to a LAN switch connecting to a private internal network.

Article written by MyComputerAid.com

Post from: MyComputerAid.com Computer support

Cisco PIX firewall overview

Cisco ASA firewalls are the newest technology in firewall solutions put out by Cisco, they are currently replacing PIX firewalls as well. ASA stands for Adaptive Security Appliances, being both a firewall and an anti-malware appliance. The ASA algorithm is not to be confused with stateful packet filtering, the adaptive security algorithm that PIX uses. ASA models represent the 5500 series and the Enterprise Edition includes four version; Firewall, IPS, Anti-X, and VPN. For small and midsize companies Cisco provides the Business Edition.

All five models of the ASA run software version 7.2.2 and the interface looks strikingly similar to the PIX one. An advantage ASA has over PIX is that even the basic ASA model has better performance than the basic PIX models. ASA can serve as an intrusion prevention system, or IPS. Furthermore, ASA is actually three devices in one, a firewall, a concentrator, and a sensor. Since ASA is replacing the PIX it is based upon the same format and runs much like PIX does. They have the same interface and much of the same features, except the ASA firewall has better performance and more functionality.

Article written by MyComputerAid.com

Post from: MyComputerAid.com Computer support

Cisco ASA firewall overview