Re: Disecting the Cisco PIX

[Roger Marquis <marquis () roble com>]

Art Mason wrote:
> ...  they are actually built on an x86 ...
> ...  Can anyone confirm any of this ...

Anyone who can browse google or cisco can confirm this.

> drop a couple of Intel Pro100+ dual-port NICs in a 2U rackmount case,
> maybe offload some of the VPN stuff onto an ASIC-based encryption
> acceleration card, and save some big bucks

Sure, once you've spent the time installing and configuring the
hardware and software.  You'll have to do the software again with
every new vulnerability and OS upgrade.  OTOH, with an appliance
like the PIX, you download a new image and it takes 4 minutes to
tftp/install.

Whether it saves big bucks depends on the value of your {,employees}
time.

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards