Which Firewall shall i use?

Are you playing with VLANs on these switches?

That's where the fun begins.

Yep -- in fact when they first brought in the switches, I'd never used one before.. so I took one that wasn't in production for r&d and messed around with it.

Initially it didn't support VLANs.. i had to upgrade the IOS to 12.x, after that I did some VLAN implementation. Its gone into production now, so I can't still mess around like I would like to though..

Switches can be set up really complex.. you'd never think that something at the data link layer could be so intelligent. (No offence to the data link layer)

I agree to that PIX firewall 501 is a good choice and also its a plug and play...............

Ive been tracking a few Pix501's and Catalyst 2950's, it seems like their price range is not that bad.

We have a Pic 520 here at work and I would just love to buy it off the company and take it home, but I dont think that will be possible.

Thinking of it, the only thing you need to buy in order to make your own pix 520 is the ISA flash card, 2 Intel nics and an old intel PIII motherboard/cpu. Thats all there is to it!

If anyone has a Pix 501 for sale, let me know!

Hi All !

I just read all the above posts and I got to learn a lot of new things from you all ... thanx

I was wondering if someone can go a little step by step on assembling a pix?
whats the os thats to be installed?
or does the pix IOS itself run everything?

What about checkpoint firewalls which make use of the Nokia box ?
is that also just a PII ??

which one is the best for enterprise security ??


Cheers!

Syed : :!:


"Notify me when a reply is posted"
how does this option work ?

which one is the best for enterprise security ??

They're all fairly secure and compete quite closely.. though most of the serious security types I know swear by PIX (I'm actually a bit of a Check Point NG fan). However PIX is harder to configure..

Thats the catch -- they're only good for enterprise security if they're configured properly... out of the box they'll all have pretty much the same ruleset.

About assembling the PIX -- Chris has some info on that, including a site that has a PIX with its innards out. IOS is an operating system / CLI in itself and will control everything after bootstrap.

Cheers,