Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-06 Thread Brian Stiff \(bstiff\)
acceleration of FPM, and I'll point out that the PISA doesn't add anything for stateful inspection. Regards, Brian > -Original Message- > From: Gustavo Novais [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 05, 2007 3:33 PM > To: Brian Stiff (bstiff) > Cc: cis

Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-05 Thread Gustavo Novais
een placed... Thank you all for your input Gustavo Novais -Original Message- From: Kevin Graham [mailto:[EMAIL PROTECTED] Sent: terça-feira, 5 de Junho de 2007 23:28 To: Gustavo Novais Cc: Brian Stiff (bstiff); cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6500 with IOS Fire

Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-05 Thread Kevin Graham
On 6/5/07, Gustavo Novais <[EMAIL PROTECTED]> wrote: > I'll suggest him to continue using its current pix525 cluster, If they want to give the IOS Firewall a shot though for what a dual-720 is going to cost, putting in a pair of 2821 or 2851 SEC-K9 bundle's with SDM shouldn't be too painful. > D

Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-05 Thread Roland Dobbins
On Jun 5, 2007, at 2:32 PM, Gustavo Novais wrote: > Do you know if the sup32-PISA brings any improvement on the IOS > firewall area? Sup32 w/PISA provides up to 2gb/sec of stateless full-packet filtering via hardware-accelerated Flexible Packet Matching (FPM). It's always good to do as mu

Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-05 Thread Gustavo Novais
de 2007 20:52 To: Gustavo Novais Cc: cisco-nsp@puck.nether.net Subject: RE: [c-nsp] 6500 with IOS Firewall - Any experiences? Hi Gustavo- I'd thought this had come up on the list before, but I couldn't find it in the archives. If you're really looking for performance, breadth of fea

Re: [c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-05 Thread Brian Stiff \(bstiff\)
Eng. Security Technology Group http://www.cisco.com/go/iosfw > Date: Mon, 4 Jun 2007 20:59:47 +0100 > From: "Gustavo Novais" <[EMAIL PROTECTED]> > Subject: [c-nsp] 6500 with IOS Firewall - Any experiences? > To: > Message-ID: > <[EMAIL PROTECTED]> > Cont

[c-nsp] 6500 with IOS Firewall - Any experiences?

2007-06-04 Thread Gustavo Novais
Hi, I currently have a customer who is buying a 6500 with redundant SUP720, but he doesn't want to use the SUP for L3 (only L2) because currently all of its L3 is done on a PIX525, on which he has lots of rules, and is able to manage by ASDM. He does not wish to buy a FWSM, so I told him that