• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 729
  • Last Modified:

IPV6 and Pix firewalls

I need an expert opinion not just regurgitated facts.

Will Pix firewalls be able to handle the increased traffic generated from IPv6 traffic? So for example

If I am using a 515 Pix for my small business, I know I don't have a lot of traffic maybe 10k users are logged on at a time due to multiple website hosting.
Will the 515 Pix handle the IPV6 or would you think the next best thing would be to upgrade to an ASA-5510?

The 515 has served my company well and of course it's a logical step in the upgrade direction, but is it really needed?
1 Solution
The PIX 515 has a performance pps limitation of 40000 packets per second @ 64 byte packets with a firewall forwarding rate of 190Mbps. Where are you at now in relations to this information with IPv4. IPv6 adds an additional  overhead of 20 bytes; so at 64 byte packets you will have much more of a less efficient packet. so your max pps at 64bytes will be much less, maybe more around 32000 pps with IPv6; however, utilizing 1500 byte packets, you will be able to get the same performance of around 15000 pps for both IPv4 and IPv6 (note the 15k came from 190000000/8/1500). So to be honest, you need to gather additional information and then make the determination based on the information provided. I would highly recommend that you upgrade to and ASA so that you can have support for both hardware and IPv6

Good luck

NetNinjaAuthor Commented:
You da man!

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now