[no subject]

I'm cirtanly interested in a PIX if it does ospf and costs around $500.

> Number of clients? 
The network isn't that big only about 100 users total.  

> Do you need a DMZ port?
I don't use DMZ ports I'd prefer using ACLs in the internet router or an 								
additional firewall to produce a DMZ. 
 
> Number of remote VPN sessions?
Fifty VPN sessions would be plenty.  But I'd like to use IPSEC for both 
workstation to network and network to network VPNs.

> How much total throughput do you need?
Currently the company has a single T1 so any firewall will handle it.

> 3DES or DES?
I allways pick 3DES but I can't really say it is necessary.  Most of the 
sessions will be ICA anyway.  So it's not quite as crackable as telnet or 
some of the other.

Could I get some sorta rack mount kit to go with it??

On Wednesday 07 July 2004 11:40 am, Jonathan Rickman wrote:
> > -----Original Message-----
&gt; &gt; From: ale-bounces at ale.org [<a  rel="nofollow" href="mailto:ale-bounces";>mailto:ale-bounces</a> at ale.org] On
&gt; &gt; Behalf Of David Hamm
&gt; &gt; Sent: Tuesday, July 06, 2004 7:32 PM
&gt; &gt; To: Atlanta Linux Enthusiasts
&gt; &gt; Subject: Re: [ale] OT: Firewall purchase
&gt; &gt;
&gt; &gt; Sure, the network be hind the firewall is Frame-Relay, all
&gt; &gt; the remotes come back through the firewall for internet
&gt; &gt; access.  I chose ospf since there were version conflicts with
&gt; &gt; RIP.  Now that OSPF is up and running I've found I like it.
&gt; &gt; Its faster and more flexible.
&gt;
&gt; Do you need a DMZ port?
&gt; How much total throughput do you need?
&gt; 3DES or DES?
&gt; VPN Throughput?
&gt;
&gt; Number of remote VPN sessions?
&gt;
&gt; A Cisco PIX will take care of your needs handily and you'd be surprised at
&gt; how robust the entry level units are. A lot of folks shy away from the PIX
&gt; because of percieved expenses. PIX solutions start in the $400 range. Many
&gt; folks skim right past the 501 and 506 because they can't believe that that
&gt; itty bitty wittle box can handle their big manly network. :) Sure, pricing
&gt; is high from the 515 on up, but the entry models fit the bill nicely for
&gt; some pretty big networks. In my opinion, if the network you are describing
&gt; is so big/busy that a PIX 501 or 506 can't handle it, then you can afford
&gt; to come off the dime. Of course, this does mean that user licensing comes
&gt; into play, but it is not really that bad overall. If you can answer those
&gt; questions definitively, I'll give you the exact model number and price.
&gt;
&gt; --
&gt; Jonathan
&gt;
&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00249" href="msg00249.html">[ale] OT: Firewall purchase</a></strong>
<ul><li><em>From:</em> jdr at xcorps.net (Jonathan Rickman)</li></ul></li>
<li><strong><a name="00251" href="msg00251.html">[ale] OT: Firewall purchase</a></strong>
<ul><li><em>From:</em> bob at verysecurelinux.com (Bob Toxen)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00208" href="msg00208.html">[ale] OT: Firewall purchase</a></strong>
<ul><li><em>From:</em> jdr at xcorps.net (Jonathan Rickman)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00236.html">[ale] back to Slack   It is here!!!!!!!!!!!!!  Version 10.0</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00238.html">[ale] ipcop1.3+anonymous proxy</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00210.html">[ale] OT: Firewall purchase</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00249.html">[ale] OT: Firewall purchase</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00237"><strong>Date</strong></a></li>
<li><a href="threads.html#00237"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>