We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now


Cisco PIX firewalls

Medium Priority
Last Modified: 2013-11-16
Heya Guys,
       I like to think im slowy becomeing a Cisco Router buff but I know little about the PIX firewall. I would like to know when a PIX firewall would be used? over say a Cisco Router running an IOS CBAC firewall, can it completely replace the function of a router? Also, can you impliment a DMZ on a router or would you need to use a PIX device? thanks ! :-)
Watch Question

PIX: Full firewall
Router: has some SPI capabilities.

More and more the IOS feature set of Cisco is adding the features of a pix, so it's getting harder to tell the diference.

If you have a Cisco router with multiple interfaces you could actually set up a DMZ.  

The PIX Software is kinda like the Cisco IOS that time forgot.  The command that you use, like write mem, are the same commmands that you used pre 11.2 IOS.  I have heard the reason that the do not innovate with simple commands is they feel the code is very secure and they do not like to make changes if not needed. (who knows if that's true.)

The Pix also has Fixup commands, which allow it to do extended analazyis of certin protocals, that  the router IOS would not be able to do.

In short, a router is not as secure as a PIX, because a PIX is built for security.  On the other hand, the throughput of a router is much better than a pix, because it is built for speed first.  They both overlap however.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


I am glad the blur between the two is not just me! :-) My Cisco 857 router has 1 wan adsl o/pots interface and 1vlan with 4 ethernet switch ports. Is it possible to have a DMZ  on this? or  do you need a router with a built i DMZ functionality? also, can you add additional vlans or are you stuck with what your get out the box?

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.