PIX or Watchguard

[machasm]

Hi,
I am quite new to VPN but have dabbled a little and set up an IPSEC tunnel using some Solwise routers.
I will be setting up a new VPN for one of my clients for an office of 20 users either side.
I was thinking of using DSL and 2 PIX 501s or watchguard SOHO6tc.
What do you guys think I should go with? There are some users using windows VPN to access their main office at the moment. If I am not mis-understood neither of these products support this but must utilise their own proprietary mobile VPN solution.
Is this right?
Any help appreciated as this is my first (serious) VPN implementation.
Mac.

 

[br0ck]

pix

 

[lgarner]

You are mis-understood. I can't speak for Watchguard, but Pix works just fine with a PPTP client.

 

[br0ck]

here is a better guide

http://www.securityfocus.com/bid/vendor/

 

[br0ck]

USE pix-501-50-BUN-K9

what kind of traffic are you looking to pass?

File and Print

MS AD
Etc...

 

[cpace]

Watchguard. If you want to spend hours troubleshooting use a pix.

 

[machasm]

Thanks for the replies guys.
The main function will be e-mail, file and print and TS.
I have also been looking at the zywall 35 which looks a better deal since it not only has a lot more horse power but will soon be capable of load balancing over 2 connections.
Still haven't made my mind up yet.
Mac.

 

[BuckWeet]

Well as cspace said, I disagree, personally I like the CLI interface, and I had to deploy the watchguard once, didn't like it at all.. The GUI is clunky, and the fact that after so many changes you have to reboot the box..


I say PIX, or maybe the zywall is good, but I personally can't stand the watchguard series..

just my 2 cents


BuckWeet

 

[ITboywonder]

I agree with Buckweet also, I also perfer the Command Line over ther GUI. I've depolyed several PIX firewalls. I am now working for a company that uses the Watchguard series firewalls. I hate them.

-Nate

 

[chicocouk]

Pix. As for troubleshooting, if you don't want to spend hours troubleshooting just do it correctly. You don't have to troubleshoot something you've properly set up.

CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP