PIX removal for 3725 security

We have a pix on the network presently and are going to remove it for a 3725 with security and firewall.. My boss told me there is a way to import all the rules and setting from the pix to the router does anyone know how to do this. We have a VPN and a few static address mapped to servers and it would be easier just to import and let the router do the work as I am not a router guy of this caliber.
LVL 1
arahmingAsked:
Who is Participating?
 
lrmooreConnect With a Mentor Commented:
Your boss lied to you. There is no such utility.
May I be so bold as to ask what your reasoning is to replace a PIX world class firewall with a router with stuck-on firewall "features"?
0
 
arahmingAuthor Commented:
we are using the router to bring in both a dsl and a T1 connection I would rather just have the router bringing in the connections and keep the pix but we are both not router guys and he wants to use the statics from the dsl to. I probably sound stupid I have a CCNA and know how to setup a router for one connection thats about it
0
 
lrmooreConnect With a Mentor Commented:
I'd still keep them both. Let the router make the routing decisions and let the PIX provide the security and VPN's.
You've got them both, what would you do with the PIX anyway? Use it as a doorstop?
0
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

 
Keith AlabasterConnect With a Mentor Enterprise ArchitectCommented:
:) lol

You don't sound stupid but the route you are following just doesn't seem to have any logic. As lrmoore has concisely explained, you have have the best hardware-based firewall and the 3725 would complement it superbly; it shouldn't replace it...
0
 
arahmingAuthor Commented:
Even though the 3725 software comes with a firewall????
0
 
arahmingAuthor Commented:
Hay does anyone know where a good white paper is for this configuration I mean I would rather not have to remove the Pix but with both connections coming in can I still use satic for both the adsl and t1 or am I going to loose 5 statics.  
0
 
Keith AlabasterConnect With a Mentor Enterprise ArchitectCommented:
There is no comparison between the PIX firewall and the firewall feature-set on the 3725. This is why the pix is called a firewall and the 3725 is a router bu any other name.

Why should you lose any statics if you used both pix and 3725?
0
 
arahmingAuthor Commented:
becuase the pix is configured to use the T1 Ip addresses accutaully would I have to configure nat on both the pix and the 3725. not sure how to set this up would have the 3725 with the v.35 than the adsl with the wic-adsl with pppoe. futhermore VPN's if we already have a VPN set up on one static can we set up another VPN for local users to log in or will using the wizard wipe out the other VPN
0
 
arahmingAuthor Commented:
I am gonna give the pont out but if you guys could answer my last question it would be cool gonna split them up furthermore I have posted the VPN question somewher else with 500 points
0
 
lrmooreCommented:
With a T1 you will have an IP address for your WAN port and another IP subnet block to use on your LAN side of the 3725. The PIX would get an IP address in the same IP range and do all the nat and statics.
If you set up one type of VPN with the wizards, you can always go back and to another type and it will not affect the existing one.

Thanks!
0
 
arahmingAuthor Commented:
Hay Thanks allot guys I have negelted my Cisco got my CCNA in 2003 and have not touched a router sense. I am going to have to go back and get some more schooling but it looks like my new boss is going to be giving me allot of haves on.
0
 
lrmooreCommented:
We'll be here to help you through the sticky parts.
0
 
arahmingAuthor Commented:
PS I Have a hangover thats why the comment I made up top is kind of well you know
0
All Courses

From novice to tech pro — start learning today.