From: Guyler, Rik (rguyler@shp-dayton.org)
Date: Fri Aug 11 2006 - 17:33:21 ART
Marc, if you are planning to take the lab while it has 6.3x code then the
520 will work fine provided it has 16MB flash. If not then don't even
consider it. Another question would be does the 520 have DMZ interfaces? I
don't know what's on the lab for the PIX but if DMZs are involved, which I
would guess they are then a 520 can provide these. In my opinion, that's an
important feature since PIX ACLs don't work the same way as router ACLs and
the difference might bite you if you have never worked on these. Plus there
could be some interesting NAT/no-NAT scenarios to work out as well as
DMZ-to-DMZ security fun you could have. ;-)
The trunking is important as well as things like failover but most of the
other unlimited features are pretty trivial in understanding and
configuration I think. Well, some of the failover stuff is a little quirky
but who's going to buy two PIXs to work on that? I think I would get the
cheapest PIX I can get that supports the code level I want (and preferably
DMZ interfaces) and then rent some rack time for the rest.
Rik
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of marc
fernandez
Sent: Friday, August 11, 2006 1:37 AM
To: ccielab@groupstudy.com
Subject: pix 506, 506E, or 520
Still trying to decide on the pix for my lab. As I am seeing these choices
available, will there be any problem using a pix 520 on my lab for practice
and will it support the same os on the lab? With an unrestricted license.
Will I be able to do most of the scenarios on the security blue prin? Should
I just go with the 506 or 506E? Are there crutial differences?
Your help is appreciated.
-marc
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:56 ART