Hi Shawn, You may well be able to just upgrade your 520 (which may mean flash/ram upgrades). It depends on what you're putting through it, terminating on it etc. Presumably you've got a fair bit going on if you're looking towards the 535. I would think if you're on 4.2 at the moment you may well just have a 2Mb flash card in it. The upgrade to 16Mb is pretty expensive (but much less than a 535). Do a show ver and see what flash/ram you've got. They're not quite as simple as routers sometimes. There are some odd codes such as Atmel, strata, at29.....something. From what I remember if it starts with "at....." (atmel,at29...) it will be 2Mb. Otherwise (strata etc) it will already be 16Mb. If you get stuck post it to the group and I'll have a dig for the codes.
Please remember though that the Pix 520 is end of sale, and from what I remember it must have been 18 months to two years ago, so if you haven't already got the flash it may be throwing money away. I don't actually know if you can still buy the flash modules. I suspect not, but someone on the group will know. One more thing - The natural upgrade for the 520 is the 525, unless you plan to expand what you're doing. I don't often get involved with pricing but I would guess that the 535 unrestricted is around 20K list, possibly more. The equivalent 525 has got to be well under 10K list. Regards, Bikespace >Thank you, Bikespace. Another question, if you don't mind, can we just >upgrade PIX OS 4.2 on 520 to 6.3, and don't buy PIX 535 to implement VPN? >Shawn ""Bikespace"" wrote in message news:[EMAIL PROTECTED] > I must admit, I've not been doing Pix as far back as 4.2 as far as I can > remember (just a few years), so you must feel you have had good value from > your 520 if you've not had to mess with it at all. > I could not guarantee that all config would go over. It certainly wouldn't > be far out as most Pix commands have stayed backward compatible, but what I > would say is that if you're putting a new Pix in, you couldn't get a better > time to do the whole config again. Replace your conduit commands with access > lists etc. You may never get round to it afterwards and it may haunt you. > The money you pay for a 535, it wouldn't be a massive increase to get an > engineer on site to do the migration for you if you don't fancy it yourself. > If you came to our company for a 535 and maintenance you probably wouldn't > have to argue for too long to get a 'very' cheap days engineering thrown in > (even free at a push). > If you're in UK and you don't get at least the first that let me know :-). > > Regards, > > Bikespace > > > > > > ""Shawn Xu"" wrote in message > news:[EMAIL PROTECTED] > > We have cisco PIX 520 with OS 4.2. Now we want to buy Cisco PIX 535 with > OS > > 6.3. > > > > Can I just import PIX 520 configuration file to PIX 535 without changing > > anything? Then later on we will add more functions. > > > > Thanks > > > > Shawn > > > > _________________________________________________________________ > > MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. > > http://join.msn.com/?page=features/virus > **Please support GroupStudy by purchasing from the GroupStudy Store: > http://shop.groupstudy.com > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73422&t=73354 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

