Considering a PIX 525 and I have questions

Posted on 2006-06-01
Last Modified: 2013-11-16
1. The out of the box setup is 2 ports. These are user configurable as WAN and LAN?
2. To add a DMZ and have other devices behind the firewall, I would add a PIX-4FE-66 card?
3. 99% of the traffic will be web users to the a shopping site. At most 4 VPN users to an internal server. In the future I would want to implement failover. Is this a suitable solution or are there better cost effective options? This will be in a colocated environment.
Question by:questfar
    LVL 20

    Accepted Solution

    1.  The ports are configurable, but by default the ethernet0 interface is the WAN interface.  It's best to just leave the defaults for your initial 2 interfaces.
    2.  You can either add the 4-port card or a single ethernet card (PIX-1FE).  If you have the budget for it, it's probably best to get a 4-port card, chances are you'll want the additional interfaces later.  But see the notes in #3 before deciding.
    3. Failover is an option on this model, but if you want that for the future, you should order your PIX with the right license initially (should be cheaper this way).
       In order to use failover:
    - 1 PIX needs to have the UR or "Unrestricted" license, & the other needs to have either a UR, an FO ("Failover") license (or a Failover Only Active-Active ("FO_AA") license if using PIX 7.x series software).  A PIX with a "Restricted" license *cannot* be used in a failover pair.
    - Both PIXes in a failover pair *must* be identical hardware (same models, same # & type of interfaces, etc), plus must be running the same exact version of PIX software.

      PIX 7.x series failover info:
      PIX 6.x series failover info:

    LVL 8

    Expert Comment

    i am totally with calvin.....


    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now