RE: Replacing my old PIX Classic

[Noonan, Wesley]

All 3 are good firewalls. It depends on what you are looking for. Do you want a packet filtering firewall (tends to be faster), then the PIX is a good choice. Depending on the amount of users, you can go with a PIX 515 or above. Do you want more proxy/application filtering capabilities? Then both ISA and FW1 are good choices. Any debate between the two is likely a religious war (with lots of M$ thrown in, I suppose because they don't have anything credible against ISA...)   HTH   Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS Senior QA Rep. BMC Software, Inc. (713) 918-2412 [EMAIL PROTECTED] http://www.bmc.com   -----Original Message----- From: Rink, Jesse [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 09:31 To: '[EMAIL PROTECTED]' Subject: Replacing my old PIX Classic   Hello,   I have a PIX Firewall from Cisco that is about 4 or 5 years old. It's so old it doesn't even have a model # and the Cisco techs get confused when I call because most have never heard of this model. No access lists or anything. Anyway, the point here is that it's old. I'm looking to update my Firewall so I can have features like Intrusion Detection, VPNs, etc. Was hoping someone could point me in the rihgt direction of what firewalls to look at. My environment is as follows: 1 WAN interface (connected to a T1 line to our ISP) 2 DMZ interfaces 1 Internal interface We could have up to 700 concurrent users going outbound through the firewall at a given time. I was thinking about looking at newer PIXs, Microsoft ISA, and Checkpoint Firewall. Of course, I'm not sure where to begin. Any recommendations? PS - Where is the best site to read the current msgs to this mailing list?  I don't like them sent to my email, I'd rather read them from a URL that is updated as messages are posted.  I'm new here... J Thanks. Jesse