RE: PIX 515E failover options

Paris
Your options are limited here. You need exactly the same hardware model,
running the same software. Your options are limited to;

1 - Best option - buy two 515E firewalls, one with unrestricted
software, one with the fail over option.

2 - best use of what you have - buy an 515E with unrestricted software
as the external firewall and VPN end point, and use the 506 as the
internal firewall as a second layer of defense.

3 - option for both solutions, perfect partner for option 1 - use the
pix as the external firewall solution due the pure speed of the
solution, and a proper application layer firewall such as ISA 2004 as an
internal application layer firewall.

Regards,
 
PJ
PJ Kotze | Technology Specialist| Microsoft Namibia | tel: +264 61
2925000, +264 61 2925019 | cell: +264 811227430 | fax: +264 61 2925002 |
email: pjkotze@microsoft.com

 

-----Original Message-----
From: Paris E. Stone [mailto:pstone@alhurra.com] 
Sent: Wednesday, June 22, 2005 8:03 PM
To: just1coder; firewalls@securityfocus.com
Subject: RE: PIX 515E failover options

Officially, failover requires the same hardware/os version.

-----Original Message-----
From: just1coder [mailto:just1coder@yahoo.ca] 
Sent: Tuesday, June 21, 2005 9:35 AM
To: firewalls@securityfocus.com
Subject: PIX 515E failover options

I'm looking at replacing a 506E with a 515E - can I keep the 506E as a 
fail over firewall? Which 515E would I need? What would the other 
options be? [any?]