simple pix firewall 500 series question

Posted on 2005-04-27
Last Modified: 2013-11-16
Hi, Im looking to move many of my vpn/routers to pix firewall solutions.  I've seen some of them on ebay for arround 100 dollars, and saw there are some licencing issues to watch for.  I have three easy questions.

is there licences to buy for users on the lan to get out via the pix gateway? if so, how much are the licences, and what does it come with by derault?

is there a limitation to how many ipsec vpn tunnels this can estabilsh? and is this a licenceing isuse also?

lastly, can this device be connected to via remote uers?  I mean without having extra hardware.  Like does it have a built in pptp server, or does this come with ipsec client based software to connect to it, or is that licencing extra.

Thanks, first person to get me the awnsers wins, actually I win.

Question by:pcavenue
    LVL 79

    Accepted Solution

    There is only one model of PIX that has any licensing restrictions - the little 501. It comes in three "flavors" -
    10 user, 50 user, and unlimited. You buy the one 'flavor' license key for the box, no other license needed for individual clients. The 501 supports 4 VPN tunnels.
    All other PIX models are not user-restricted in any way.

    Yes, any version of PIX can support remote clients, either with Microsoft PPTP client or with Cisco's own IPSEC client (very nice, and free, as long as you own a first-hand PIX, meaning not second-hand used model, but new).
    No client licensing at all, just the 4 VPN restriction on the 501 model regardless of user license flavor.

    LVL 6

    Expert Comment

    Well not all PIX firewalls have VPN capabilities.  You can use IPSEC on a used Firewall if you reinstall the IOS.

    Reinstall IOS:

    LVL 2

    Author Comment

    OK thanks guys, so the verdic is that i can get a used one if i just want to use windows stock pptp client and it does come with a built in pptp server????
    LVL 79

    Expert Comment

    Yes, any PIX with ver 6.x has the capability to be a PPTP and/or IPSEC VPN server.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Suggested Solutions

    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now