From: Farrukh Haroon (farrukhharoon@gmail.com)
Date: Sun Jan 06 2008 - 01:41:46 ARST
Actually IMHO as per the current security lab you don't really require any
ASAs in your home lab. It is not worth the investment.Get Cheap PIX 515 (or
515e) from Ebay or somewhere and work with those. But make sure you get Two
URs and not 'R' or 'DMZ' bundles. The third one (the PIX itself in the lab),
can be a DMZ/R bundle, should not matter that much.
As of now the lab is running 7.2.x for the ASA/PIX (as per NetPro 'Ask The
Expert'). The only feature that you wont be able to test with the PIX
firewalls would be WebVPN/SSL VPN, which at a maximum would take one or two
rack rental sessions to master.
However if the lab moves towards ASA version 8.x in the future, then this
gap between the two platforms would further increase. Starting with 8.x ASA
5510s support 'VPN Load-Balancing' , so this feature could also be a
possible lab topic (after the change announcement, if any). Then there are
many new SSL VPN features in 8.x that are only available on the ASA
platform. As per the marketing guys they are about 120 :), don't believe
that figure but even if we divide that figure by 10 i.e. 12 new features is
good enough :)
Regards
Farrukh
P.S. I got two of my UR PIX PIX firewalls on Ebay for about 800/900$.
On Jan 6, 2008 12:54 AM, darth router <darklordrouter@gmail.com> wrote:
> Are there any major limitations I would face if I used 2
> 5505s with the basic license in my security rack?
>
> I suppose I could just use Qemu and emulate them, but I would like to have
> the hardware. Any tips?
>
> DR
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Feb 01 2008 - 10:37:58 ARST