What router &/or firewall should I get?

[bobcat]

We are wanting to upgrade our current setup with a new router and/or firewall because we're adding a couple remote offices into the mix. We're on a 256k Fract T1, with currently a Cisco 1600r simply routing packets off the T1. Behind it is a couple e-mail servers, and a Webramp 700s (Webramp=Sonicwall, which is what we're planning on replacing) and then our LAN.

#1 Remote office has a 1300/256 ADSL connection, 4-8 concurrent users using Baan: moderate usage.
#2 Corporate office in Europe.. a few (2-3) users here will access their Baan system: fairly light usage.
#3 Travelling users, dialup users, nothing too major. No more than 3-5 at any given time: very light usage.

Anyway, it's enough usage where I don't think the Webramp can handle processing all the IPSec packets, routing from the LAN, and securing our LAN at the same time.

Also, if we get into this and figure out that 256k isn't big enough, we'll be uprgading probably to 512k or 768k depending on how much we need.

So, what should I get here? Should I sell the 1600 & Webramp and upgrade to a 2600 or 3600 with VPN, or should I keep the 1600 and get a PIX to replace the Webramp? If so, which one? Or maybe I'm totally off here? I'm not incredibly familiar with Cisco products, so maybe someone can help me out here.

If you're a vendor some approx pricing would be good too.

Thanks
Todd

 

[wybnormal]

Personally I'd be very surprised if the webramp could NOT handle the load.. If I remember right, the specs on the 700s and even it's new brother from Sonicwall were good to 25 users with VPN. The ports on the webramp at 10Mbps which is 10x the average internet connection ( T1 is 1.544) average DSL is 800-1.2Mbps.. so there is alot of room to play there with bandwidth. I used to push a few over 3,000 nodes to the internet with a T1 and a 2500 series router.. Give the 1600 as much RAM as it will take or get a 1600R which is faster. Another option is the 1720 or 1750 which replaces the 1600s and offer Firewall and VPN solutions now.

It's a rare time that a software solution is faster then well designed hardware solution and Webramp is hardware based. Custom ASICs and all that good stuff.

MikeS
Find me at

http://www.packetattack.com

"Diplomacy; the art of saying 'nice doggie' till you can find a rock" Wynn Catlin