<div>
<div class="content wysiwyg-content">
We have several clients using Pix 501 devices. &nbsp;What is the limit for active VPN connections on these devices? &nbsp;Is this determined by the IKE peers limit? &nbsp;And if so, can extra licenses be purchased and installed? &nbsp;I have found only conflicting information online, and Cisco will not even answer questions about such an &quot;ancient&quot; device. &nbsp;:)<br />
Although the IKE peer limit on all of these devices is 10, we have been able to have more than 10 IKE tunnel connections active. &nbsp;Please explain Cisco's use of terminology and licensing.<br />
Thank you!
</div>
</div>


We have several clients using Pix 501 devices.  What is the limit for active VPN connections on these devices?  Is this determined by the IKE peers limit?  And if so, can extra licenses be purchased and installed?  I have found only conflicting information online, and Cisco will not even answer questions about such an "ancient" device.  :)
Although the IKE peer limit on all of these devices is 10, we have been able to have more than 10 IKE tunnel connections active.  Please explain Cisco's use of terminology and licensing.
Thank you!

Cisco Pix 501 IKE licenses

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).