11 messages in net.nether.puck.cisco-nsp[c-nsp] Sizing up a Cisco PIX
FromSent OnAttachments
Kim OnnelJan 10, 2005 5:30 am 
Jim McBurnettJan 10, 2005 8:34 am 
Timothy ArnoldJan 11, 2005 5:48 am 
Olav LangelandJan 11, 2005 6:23 am 
Timothy ArnoldJan 11, 2005 6:57 am 
Kim OnnelJan 11, 2005 7:19 am 
Jim McBurnettJan 11, 2005 12:32 pm 
Jim McBurnettJan 11, 2005 12:34 pm 
su1drootJan 15, 2005 2:14 pm 
Konstantin BarinovJan 15, 2005 4:20 pm 
David PrallJan 15, 2005 8:04 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[c-nsp] Sizing up a Cisco PIXActions...
From:Jim McBurnett (ji@tgasolutions.com)
Date:Jan 11, 2005 12:34:52 pm
List:net.nether.puck.cisco-nsp

10 users, equates to 10 MAC addressable traffic paths from inside to out.. At least that is how I have interpretted the website... Anyone got a comment here?

If those 3 are it, and no other traffic will be protected by the PIX, a 501 mail suit you well.....

Jim

-----Original Message----- From: Kim Onnel [mailto:kari@gmail.com] Sent: Tuesday, January 11, 2005 7:20 AM To: Jim McBurnett Cc: cisc@puck.nether.net Subject: Re: [c-nsp] Sizing up a Cisco PIX

How many hosts?

For now 3 hosts, a DNS server, a Netflow aggregation server, and another critical server

If you only have 3 hosts, and don't need failover and it will be a dedicated LAN for them behind the PIX, just get a 501 with a 10 user license.

what is meant by 10 user liscence, 10 ssh sessions or 10 nodes to protect, i thought its measured with traffic/throughput.

IF you may need to do a DMZ and have more hosts, look at the 506(dot1q

vlan DMZ) or 515(dot1q vlan DMZ and physical port DMZ)

Later, Jim

-----Original Message----- From: Kim Onnel [mailto:kari@gmail.com] Sent: Monday, January 10, 2005 5:30 AM To: cisc@puck.nether.net Subject: [c-nsp] Sizing up a Cisco PIX

Hi, i want to size a firewall for my Dns server + netflow log collector + bastion host,

Anytips on how to size up a firewall(cisco pix) ?