Which PIX???? 506 Opinions

[SmashX1]

My network consists of 70 users, 7 mobile users, 40 Servers, 2 data T1's. I need VPN and a firewall solution. I was thinking about getting the PIX 506. Someone I know who has worked with them claims they will slow with a low throughput. Anyone with experience on this PIX have an opinion? The last thing I want to do is introduce something to the environment which creates a noticable speed difference on the network or internet.

Thanks,
Mike

 

[rburke]

I would say go with the PIX 515. It can have up to 6 interfaces, and has a throughput of 160 Mbits. That way you can put your servers in a DMZ and place your users on a real "inside" secure interface. There is a Limited and Unlimited version of the 515. The Limited version can have up to 3 interfaces, and the Unlimited has up to 6 interfaces, just depends what kind of network structure you have, or want to implement. Also, for VPN access it comes with a DES license for free, but you can upgrade to 3DES encryption. Here's a link to the Cisco PIX 515 link.

http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/p515e_ds.htm

Hope this helps, let me know....

Burke

 

[yizhar]

HI.

I would also go fot the pix515, and also consider a dedicated VPN server - depending on how many VPN users you're going to have.

The pix can have good VPN performance but is not so flexible if you need to manage many different VPN clients.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar