[no subject]

> > A Pix would never support 50 VPN sessions and probably would 
> > collapse around 5-10.  

> Well that's certainly nice to know. It must have been my imagination working
> in overdrive when I reached out and touched a PIX 515 that was chugging
> right along with over 300 sessions. It probably should have burned my
> fingers to the bone. Heck, it probably melted right after I left. That 506E
> (<$1000.00) that had been handling 18 sessions for over 100 days must have
> been my imagination as well. And you're almost right with your 5-10 number
> in that the 501 is limited to 10, but it pretty much does all 10 without any
> problems. I've seen it on numerous occasions. Heck, I know of a location a
> few miles up the road where a guy has 8 of the little boogers all meshed
> with VPN tunnels, running OSPF just like the original poster wanted to.

> Bob I have a lot of respect for you and your knowledge, but that statement
> was beyond over the top.
Well, if most of those 300 sessions were mostly idle.  Sure, it could
handle it 'cause there's nothing to handle.  If they're all active over
a 100 Mbps network saturating the network, I rather doubt that a <$1000
unit can do the VPN.  There simply isn't the CPU horsepower for it as
it would take on the order of 15 GHz of Pentium-class processing according
to my MEASUREMENTS.

While my measurements was on Linux equipment, it was my client that
reported that a Pix (515, I think) that choked on 5-10 sessions pushing
data over a 3 Mbps pipe and needed a Cisco accelerator to get decent
performance.  If you did better then great.

> --
> Jonathan
Bob


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00251" href="msg00251.html">[ale] OT: Firewall purchase</a></strong>
<ul><li><em>From:</em> bob at verysecurelinux.com (Bob Toxen)</li></ul></li>
<li><strong><a name="00252" href="msg00252.html">[ale] OT: Firewall purchase</a></strong>
<ul><li><em>From:</em> jdr at xcorps.net (Jonathan Rickman)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00268.html">[ale] programming languages</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00270.html">[ale] Label Printers</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00252.html">[ale] OT: Firewall purchase</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00075.html">[ale] Book Recommendation - for 14 year old kid switching to Linux</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00269"><strong>Date</strong></a></li>
<li><a href="threads.html#00269"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>