RE: QOS on PIX

From: Richard Dumoulin (richard.dumoulin@vanco.es)
Date: Fri Mar 19 2004 - 05:36:12 GMT-3


I am not an expert on security but I have heard bad rumors about PIX
compared to Netscreen in terms of performance etc ...
Also regarding IOS firewalls, I thought they were far less good than
hardware based boxes !!

--Richard

-----Mensaje original-----
De: Nguyen Hoang Long [mailto:ng-hlong@hn.vnn.vn]
Enviado el: viernes, 19 de marzo de 2004 9:28
Para: Richard Dumoulin; Tran Kim Phong; 'Ahmed Mustafa';
ccielab@groupstudy.com
Asunto: Re: QOS on PIX

PIX is behind Netscreen on that QoS point, but IOS firewall is not.
If the rumors that VPN concentrator, PIX will be terminated & FULLY replaced
by IOS Firewall on high-end router platform, Cisco is not behind Netscreen.

Onemore, Netscreen price, too expensive, I see it about 2 times that of
Cisco with equivalent performance.

CCNA/CCNP/CCIE bootcamp
www.vn-experts.net.vn / www.vnexperts.net

----- Original Message -----
From: "Richard Dumoulin" <richard.dumoulin@vanco.es>
To: "Tran Kim Phong" <tkphong@globaleis.com>; "'Ahmed Mustafa'"
<ahmed.mustafa@sbcglobal.net>; <ccielab@groupstudy.com>
Sent: Friday, March 19, 2004 2:44 PM
Subject: RE: QOS on PIX

> Then PIX is still far behind Netscreen !!
>
> -----Mensaje original-----
> De: Tran Kim Phong [mailto:tkphong@globaleis.com]
> Enviado el: viernes, 19 de marzo de 2004 8:33
> Para: 'Ahmed Mustafa'; ccielab@groupstudy.com
> Asunto: RE: QOS on PIX
>
>
> Hi Admed,
> PIX doesn't support QoS. BTW, you can configure QoS at the gateway
> router.
> Thanks,
>
> Kim Phong.
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Ahmed Mustafa
> Sent: Friday, March 19, 2004 10:04 AM
> To: ccielab@groupstudy.com
> Subject: QOS on PIX
>
> What is the best way to configure rate-limiting on servers if they are
> directly connected to PIX. Does PIX support QOS, if not then what is
> the best
> way to confiures some media servers that are connectely directly on PIX
> DMZ
> ports to prevent servers from chocking since other traffic such as ftp
> file
> transfer, email and others are leaving the network at the same time.
>
> Thanks,
>
> Ahmed
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:35 GMT-3