Re: PIX 506E vs NetScreen 5XP/5XT

From: WizzyWoW (zen7948@zen.co.uk)
Date: 03/24/03 

From: "WizzyWoW" <zen7948@zen.co.uk>
Date: Mon, 24 Mar 2003 22:11:19 -0000

Nice one Derek, I'll also go for NetScreen in this scenario..I take it by
better VPN support you are refering to NAT-Traversal which is supported on
the firewall and the VPN client.

Wizzy
"Derek Nash" <derek@nashworld.net> wrote in message
news:3e7f521d$0$83870$a1866201@newsreader.visi.com...
> I work for reseller that sells both Cisco and NetScreen. I am certified
> under both the PIX and the NetScreen. I prefer the NetScreen products for
> the following reasons:
>
> 1. Faster Performance (Firewall and VPN Throughput)
> 2. Better GUI and CLI (In my opinion)
> 3. Better VPN support, although PIX OS 6.3 is suppose to fix a lot of
these
> issues.
> 4. No NAT requirement
> 5. More secure in my opinion. Both the OS, VPN Client, and ICMP support.
> 6. Lower learning curve.
> 7. Support for OSPF/BGP on the 5XT and up
> 8. Support for AES
> 9. 5XT supports a Quasi DMZ
> 10. Better price point.
>
> Some areas where the Cisco Accels:
>
> 1. Tough to beat Cisco TAC for support.
> 2. More extensive IDS features builtin on the PIX.
> 3. Better price point assuming you don't need 3DES
>
> With all being both are decent products. Hope that helps!
>
> Derek; MCSE, CCSP, NCSA
>
> "D. P. Bullington" <dpbullington@hotmail.com> wrote in message
> news:A2sfa.90848$Kc5.3921834@news2.east.cox.net...
> > I am looking for recomendation on wheteher to obtain a PIX 506E vs
> NetScreen
> > 5XP/5XT for our small business w/T1 and some web hosting. I like the PIX
> > because its a Cisco and seems solid, but I like the Netscreens because
> they
> > offer L2 transparent briding modes. With the PIX, the NAT would be the
> only
> > way to go but we would rather not use NAT and have a transparent
firewall
> so
> > we can public address our inside network. Thoughts would be
> appreicated..on
> > ease of config, performacne, reliabillity, security, etc.
> >
> > Thanks,
> >
> > DPB
> >
> >
>
>

Relevant Pages

  • Re: PIX 506E vs NetScreen 5XP/5XT
    ... I work for reseller that sells both Cisco and NetScreen. ... although PIX OS 6.3 is suppose to fix a lot of these ... Both the OS, VPN Client, and ICMP support. ... > because its a Cisco and seems solid, but I like the Netscreens because ...
    (comp.security.firewalls)
  • Re: Virus risk via VPN
    ... Netscreens Firewall will look into Java/ActiveX and even URLs if you want. ... > sent from the VPN gateway/firewall that checks the client pc to be sure ... > I know Nortel Contivity will support tunnel guard capability in the near ...
    (comp.security.firewalls)
  • Re: [fw-wiz] insecurity in internet connection thro cable modems
    ... GlobalPro makes it easier to maintain a fleet of Netscreens. ... Netscreen IPSec with Cisco PIX, Cisco IOS, Checkpoint, Cisco VPN3k, FreeSWAN; ... Support for preshared keys, x509 certs, ldap auth, and securid ...
    (Firewall-Wizards)
  • Re: PIX 506E vs NetScreen 5XP/5XT
    ... NAT, that depeneds on your situation, both Cisco and Netscreen support it. ... when I shipped all our Netscreen products to the VP of Technical Services ... >> because its a Cisco and seems solid, but I like the Netscreens because ...
    (comp.security.firewalls)
  • Re: enterprise class firewalls - opinions please
    ... I came from a Cisco background into Netscreen. ... The only thing I can on Checkpoint vs Netscreen is that Netscreens OS is the ... I've had to make a few support calls and they've been really onto it. ... Usually (especially in the case of the PIX), ...
    (comp.security.firewalls)