pix w/3rd interface for DMZ?

Can anyone recommend an affordable PIX (less than $500 hopefully) that has 3 interfaces? I want to run a DMZ off of one.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The lowest model PIX you can get would be a 506E with its 2 VLAN interfaces.  You can setup a VLAN for the DMZ network off the 506E.  You'll have to get a 515 to get 3 physical interfaces but you'll seriously blow your $500 budget.
One thing to note.  You need to run software version 6.3(4) for VLAN support on the 506E if you decide to go that route.
dissolvedAuthor Commented:
so I will have to do interVLAN routing on the 506e?  (I'm assuming the PIX does the inter-vlan routing?)

I'm assuming a 3rd physical interface is a little more secure than a virtual one?
Well, you setup an 802.1q trunk between the PIX and switch.  Then you setup the logical/VLAN interface on the PIX and create a second VLAN on the switch for the DMZ hosts.  Add the DMZ hosts to the DMZ vlan and you should be all set.

Having a 3rd physical interface may make some people sleep better at night knowing that the DMZ is physically seperated from the inside network.  It's conceivable that if a DMZ host was compromised, it could also take down the inside network if it were to overload the physical NIC on the PIX.  In a good size production environment, a 3rd physical interface would be desired.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dissolvedAuthor Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.