asked on

Pix 515 or 520 VPN-support -recommendations

A small company need to buy a used pix firewall for (around 100 users) and support site to site vpn tunneling. and would like some recommenditions about the licesnse, applaince type and place to buy.
so, is a used pix 515 with (R) license would be good for this purpose? please explain
do they need a vac or vac+ card?
how about 520? and where to buy rather than ebay of course .

budget for this device is from $1000 to $1500 only

also any comments on this pix 520 here: http://cgi.ebay.com/Cisco-Pix-520-Firewall-PIII-850-256-16MB-UR-525-535-515_W0QQitemZ330059662642QQihZ014QQcategoryZ64019QQrdZ1QQcmdZViewItem

thanks!

Les Moore

515, even with Restricted license should be adequate.
No VAC necessary for VPN on 515, but might be necessary on older 520.
I'd go with the 515. Try to find this bundle PIX-515E-FO-BUN
It has 3 FE interfaces do you can have a DMZ in the future if you want it.

If you buy used Cisco gear, you can't get the latest operating system without a cost to re-license the OS, then the cost of SmartNet maintenance. Just beware when buying used gear for a critical business application.

http://cgi.ebay.com/Cisco-Pix515E-Firewall-Barely-Used-Pix-515E-firewall_W0QQitemZ280057475911QQihZ018QQcategoryZ64019QQcmdZViewItem

fm250

ASKER

So 520 is actually an older one.
And you mean, you can't get the OS with only SmartNet? if so how much does it cost to re-license the OS. thanks!

ASKER CERTIFIED SOLUTION

Les Moore

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

fm250

ASKER

lrmoore,
So let say if I bid on something like the one you provided the link for (in the above post) and I got it for around $1000. and let say it has the software I need (or I can download the software for it).
Why would I need to re-licesnse?

Les Moore

To be legal. And I doubt that it has the latest software. And you can't just download the software anywhere except from Cisco (legally). If you have a problem with it, you can't get it fixed. If you don't relicense it in your name, you can't get smartnet maintenance. Smartnet is much cheaper than another firewall if this one goes bad.
If $1000 is disposable income to you, then you're OK
If you have no qualms about running illegal software, then you're OK
If you are a legally incorporated company, then you should be concerned with running legal software.

fm250

ASKER

I see. interesting how cisco do the relicesnsing!
Thanks