PIX 515e satisfy requirements?

Posted on 2005-05-09
Last Modified: 2010-04-17
I got roughly 80 users at corporate, and roughly 20 sites with each one having about 2-10 computers.  About 8 sites has a Fractional T1 from 256 to 512KB, and the others are DSL lines.  It's a hub and spoke diagram where they come back for me for internet:

 Internet--->[router]--->[checkpoint FW]----LAN----[Router2]---WAN---- Remote

The vpn tunnels are managed by Qwest.

I got a Checkpoint firewall and I am looking to replace it.  I got a PIX 515e in mind.  But should I get a PIX 515e Restricted, or a PIX 515e UnRestricted?  I know the UnRestricted has more throughput then the Restricted.  Which PIX will satisfy my requirements?
Question by:Pentrix2
    LVL 43

    Assisted Solution

    The restricted license will allow you to use 3 physical interfaces (versus 6), will allow 48,000 connections (versus 130,000), provides 64MB of ram (versus a maximum of 128MB) and does not support failover (not sure if you were looking to implement this).

    I would recommend going with the unrestricted license if at all possible but the restricted should suffice if you don't need more than one additional physical interface and don't need failover.  The 64MB of ram would concern me a little bit, I'd feel much better with 128MB in the PIX.
    LVL 79

    Accepted Solution

    A general rule of thumb for sizing a PIX
    501 = < 25 users, 1-2 public servers, max 4 vpns
    506 = 25 - 50 users + some VPNs + 2-3 public servers
    515R = 50-150 users + lots of VPNs + handful of public servers
    515UR = 100-150 users + VPNs + failover
    525  = 150 + users, more than 3 interfaces needed, + failover + Gigabit capability + >10Mb ISP/T3
    535 = Enterprise/ISP/Hosing provider

    >I know the UnRestricted has more throughput then the Restricted.
    Not necessarily. Your throughput will be restricted by your T1/ISP connection, not by the PIX. If you have a single or even dual T1's, neither PIX will have any greater throughput than the other.

    I would not hesitate to go with the 515e Restricted. As long as it comes with 64Mb RAM, you can even upgrade it to 7.0(1).
    You can always upgrade to UNrestricted at any time in the future to add failover feature, etc with a simple RAM upgrade and new license key.

    Go for it, dude!
    LVL 9

    Author Comment

    Thanks JFrederick29 and Irmoore for all the great inputs.  I would be purchasing the PIX 515R because my vpn tunnels are managed by Qwest and probably would stay like that forever.  I'll give you guys an update once I'm finished my PIX class and deploying it in my network.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    What is SDWAN? 9 172
    How to boost WiFi? 7 35
    VLAN Tag for chained network device. 11 46
    EIGRP  router failure 14 15
    It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
    Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now