Re: [fw-wiz] Disecting the Cisco PIX

From: Roger Marquis (marquis@roble.com)
Date: 07/31/02 

From: Roger Marquis <marquis@roble.com>
To: firewall-wizards@honor.icsalabs.com
Date: Wed Jul 31 07:19:01 2002

Art Mason wrote:
> ... they are actually built on an x86 ...
> ... Can anyone confirm any of this ...

Anyone who can browse google or cisco can confirm this.

> drop a couple of Intel Pro100+ dual-port NICs in a 2U rackmount case,
> maybe offload some of the VPN stuff onto an ASIC-based encryption
> acceleration card, and save some big bucks

Sure, once you've spent the time installing and configuring the
hardware and software. You'll have to do the software again with
every new vulnerability and OS upgrade. OTOH, with an appliance
like the PIX, you download a new image and it takes 4 minutes to
tftp/install.

Whether it saves big bucks depends on the value of your {,employees}
time. 

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/

Relevant Pages

  • lots of firewall questions
    ... I have a qwest dsl line coming in to a cisco 678 and then into a Linksys 8 ... him paying some other company big bucks to host 3 gigs of files. ... here for just the 15 bucks a month fee of renting the ip address). ...
    (comp.security.firewalls)
  • I need firewall help - sorry for posting this again.
    ... I have a qwest dsl line coming in to a cisco 678 and then into a Linksys 8 ... here for just the 15 bucks a month fee of renting the ip address). ...
    (comp.security.firewalls)
  • Re: Switch to help Monitor Traffic
    ... Remember that's list pricing, but it will still be a couple hundred bucks. ... The service is where Cisco will stand out. ... Prev by Date: ...
    (microsoft.public.win2000.networking)