RE: pix vs. ios firewall feature set

["avraham shir-el (arthur sherman)" <avraham () jct ac il>]

the reason i'm not looking at the entry level pix is that even
on our small net, there's a handful of subnet which don't trust each 
other, but need limited access to each other.   it's hard  4 me
to justify a 515, so the existing 2600 with fw feature set added on
looks like the way to go.  i've been getting positive feedback
on this if u've been following this thread.  if i've  missed any
assumptions that  the list is assuming, please fill me in.
tnx
ams
avraham shir-el
director of computing center
jerusalem college of technology - machon lev
p. 972-2-675-1163

    > FROM - Noonan, Wesley <Wesley_Noonan () bmc com>
    > WHEN - 2 June 2003, 13:45
    > SUBJ - RE: [fw-wiz] pix vs. ios firewall feature set
    > TO   - pauls () nexicom net, avraham () jct ac il, firewall-wizards () icsalabs com
    > 
    > Just curious, but why not throw a PIX 501 or 506 in the small offices?
    > Obviously, needing something other than an Ethernet interface requires a
    > router, but in my experience a lot of small offices are hanging off of DSL,
    > Cable Modem or Ethernet wired BANs (building area networks) so a PIX (or any
    > of the other SOHO firewalls) works really good.
    > 
    > Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
    > Senior QA Rep.
    > BMC Software, Inc.
    > (713) 918-2412
    > wnoonan () bmc com
    > http://www.bmc.com
    > 
    > 
    > > -----Original Message-----
    > > From: Paul Stewart [mailto:pauls () nexicom net]
    > > Sent: Monday, June 02, 2003 07:21
    > > To: avraham () jct ac il; firewall-wizards () icsalabs com
    > > Subject: RE: [fw-wiz] pix vs. ios firewall feature set
    > > 
    > > I posed this question previously and was told that almost all features at
    > > incorporated into the IOS.  The features I use most are in both but I'm
    > > sure
    > > there's features that are not in the IOS FW Feature Set.. Kinda wish
    > > someone
    > > had a list of what's *not* in the IOS... Anyone? :)
    > > 
    > > My adoption of using IOS for firewalling has been that of for small
    > > clients
    > > (under 100 workstations).... Anything over 100 or so users I use a PIX box
    > > specifically....
    > > 
    > > Take care,
    > > 
    > > Paul
    > > 
    > > 
    > > -----Original Message-----
    > > From: firewall-wizards-admin () honor icsalabs com
    > > [mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of avraham
    > > shir-el (arthur sherman)
    > > Sent: Saturday, May 31, 2003 5:33 PM
    > > To: firewall-wizards () icsalabs com
    > > Subject: [fw-wiz] pix vs. ios firewall feature set
    > > 
    > > 
    > > 
    > > gentlemen:
    > > a cisco engineer recently told me that the plan for the above 2 products
    > > is
    > > %100 feature convergence and that currently, there's about %80 of the
    > > features of pix present in the ios firewall feature set. any comments as
    > > to
    > > the reality of the above?
    > > 
    > > tnx
    > > ams
    > > avraham shir-el
    > > director of computing center
    > > jerusalem college of technology - machon lev
    > > p. 972-2-675-1163 _______________________________________________
    > > firewall-wizards mailing list firewall-wizards () honor icsalabs com
    > > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > > 
    > > _______________________________________________
    > > firewall-wizards mailing list
    > > firewall-wizards () honor icsalabs com
    > > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards () honor icsalabs com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards