PJ, notice, I am not the original poster.
Please direct your responses to him.
Shameless corporate plug in option 3 below.
-----Original Message-----
From: PJ Kotze [mailto:pjkotze@microsoft.com]
Sent: Wednesday, June 22, 2005 7:52 PM
To: Paris E. Stone; just1coder; firewalls@securityfocus.com
Subject: RE: PIX 515E failover options
Paris
Your options are limited here. You need exactly the same hardware model,
running the same software. Your options are limited to;
1 - Best option - buy two 515E firewalls, one with unrestricted
software, one with the fail over option.
2 - best use of what you have - buy an 515E with unrestricted software
as the external firewall and VPN end point, and use the 506 as the
internal firewall as a second layer of defense.
3 - option for both solutions, perfect partner for option 1 - use the
pix as the external firewall solution due the pure speed of the
solution, and a proper application layer firewall such as ISA 2004 as an
internal application layer firewall.
Regards,
PJ
PJ Kotze | Technology Specialist| Microsoft Namibia | tel: +264 61
2925000, +264 61 2925019 | cell: +264 811227430 | fax: +264 61 2925002 |
email: pjkotze@microsoft.com
-----Original Message-----
From: Paris E. Stone [mailto:pstone@alhurra.com]
Sent: Wednesday, June 22, 2005 8:03 PM
To: just1coder; firewalls@securityfocus.com
Subject: RE: PIX 515E failover options
Officially, failover requires the same hardware/os version.
-----Original Message-----
From: just1coder [mailto:just1coder@yahoo.ca]
Sent: Tuesday, June 21, 2005 9:35 AM
To: firewalls@securityfocus.com
Subject: PIX 515E failover options
I'm looking at replacing a 506E with a 515E - can I keep the 506E as a
fail over firewall? Which 515E would I need? What would the other
options be? [any?]
