Welcome to ISAserver.org

Cisco PIX

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Cisco PIX

Page: [1]

Message

<< Older Topic Newer Topic >>

Cisco PIX - 25.Oct.2002 7:20:00 PM

japerry

Posts: 69
Joined: 25.Apr.2002
Status: offline

I have a client that is thinking of replacing the ISA with a PIX firewall.... Does the PIX offer significant advantages over the ISA? I'm sure this is relative to the need, but any general comments are helpful.

Thx JP

Post #: 1

Featured Links*

RE: Cisco PIX - 25.Oct.2002 9:51:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi JP,

why would the customer do that? ISA has much more features than the PIX. [Big Grin]

HTH,
Stefaan

(in reply to japerry)

Post #: 2

RE: Cisco PIX - 25.Oct.2002 10:19:00 PM

japerry

Posts: 69
Joined: 25.Apr.2002
Status: offline

I think they perceive the PIX as a better solution for some reason? I am not that familiar with the PIX. I know a few Cisco techs have him leaning in that direction. I wanted to gather some facts and see what I could find.

Any input is helpful!

I want to keep the Cisco guys out of the account....

(in reply to japerry)

Post #: 3

RE: Cisco PIX - 25.Oct.2002 10:32:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi JP,

well, all depends on what the customer needs are. If web proxy/caching, Windows integrated user/group based access control and VPN client access is a major requirement, then the ISA server is the only all-in-one solution I know of.

If the customer likes to spend some money, why not add a PIX in the picture as outer firewall. You will have then a back-to-back DMZ scenario with two completely different firewalls. In my opinion the best setup you can get, although I would exchange the PIX with a Netscreen! [Razz]

HTH,
Stefaan

(in reply to japerry)

Post #: 4

RE: Cisco PIX - 29.Oct.2002 8:27:00 AM

japerry

Posts: 69
Joined: 25.Apr.2002
Status: offline

Netscreen? I am not familiar with? Who makes this product?

I know there is no simple answer and it is all based on the unique systems and how they are setup. (And the level of security needed) But as a general answer, is adding another firewall kindof an overkill?

Thx for all of the input!
JP

(in reply to japerry)

Post #: 5

RE: Cisco PIX - 29.Oct.2002 9:48:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi JP,

what would you think of http://www.netscreen.com [Big Grin]

If you can afford it, it's not overkill. Especially when you are thinking about publishing services to the outside world. Just keep in mind that ISA should be the inner firewall in a back-to-back scenario.

HTH,
Stefaan

(in reply to japerry)

Post #: 6

RE: Cisco PIX - 30.Oct.2002 1:11:00 AM

japerry

Posts: 69
Joined: 25.Apr.2002
Status: offline

Thank you for the info!

(in reply to japerry)

Post #: 7

RE: Cisco PIX - 30.Oct.2002 9:02:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi JP,

glad I could help! [Smile]

Thanks,
Stefaan

(in reply to japerry)

Post #: 8

RE: Cisco PIX - 31.Oct.2002 6:34:00 PM

castroe

Posts: 1
Joined: 28.May2002
From: Boise
Status: offline

Hi spouseele,

I noticed earlier your answer to a similar question a few months back, anf tried to follow your counseling about ISA as an inner firewall and using an outside firewall (in my case FVS318 VPN-Firewall - Netgear). Unfortunately I did run into some problems with the configuration, probably due to inexperience in this area. Could you please help me a bit with the configuration?

Thanks,

Ed

(in reply to japerry)

Post #: 9

RE: Cisco PIX - 31.Oct.2002 8:34:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Ed,

OK, we can help you as much as possible. However, it would be better if you start a new topic and give us some more information about your specific configuration and problem! [Big Grin]

HTH,
Stefaan

(in reply to japerry)

Post #: 10