Re: [fw-wiz] Disecting the Cisco PIX
From: Roger Marquis (marquis@roble.com)
Date: 07/31/02
- Next message: Carson Gaspar: "Re: [fw-wiz] Securing a Linux Firewall"
- Previous message: Stephen P. Berry: "Re: [fw-wiz] Securing a Linux Firewall"
- Maybe in reply to: Art Mason: "[fw-wiz] Disecting the Cisco PIX"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Roger Marquis <marquis@roble.com> To: firewall-wizards@honor.icsalabs.com Date: Wed Jul 31 07:19:01 2002
Art Mason wrote:
> ... they are actually built on an x86 ...
> ... Can anyone confirm any of this ...
Anyone who can browse google or cisco can confirm this.
> drop a couple of Intel Pro100+ dual-port NICs in a 2U rackmount case,
> maybe offload some of the VPN stuff onto an ASIC-based encryption
> acceleration card, and save some big bucks
Sure, once you've spent the time installing and configuring the
hardware and software. You'll have to do the software again with
every new vulnerability and OS upgrade. OTOH, with an appliance
like the PIX, you download a new image and it takes 4 minutes to
tftp/install.
Whether it saves big bucks depends on the value of your {,employees}
time.
-- Roger Marquis Roble Systems Consulting http://www.roble.com/
- Next message: Carson Gaspar: "Re: [fw-wiz] Securing a Linux Firewall"
- Previous message: Stephen P. Berry: "Re: [fw-wiz] Securing a Linux Firewall"
- Maybe in reply to: Art Mason: "[fw-wiz] Disecting the Cisco PIX"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
