topic Re: Replacing a PIX 520 in Network Security

Replacing a PIX 520

rob.wright — Fri, 21 Feb 2020 07:58:57 GMT

Hi, I have a client that has an PIX 520 which requires an upgrade to a more current unit. I have looked at the literature on this site and have determined the PIX525 will do the job.

The only issue I have is that the PIX520 uses a connection based license for concurrent connections. Is this licensing gone now? How many concurrent xlated sessions can the 525 handle?

Any help or links would be appreciated.

Thanks.

Re: Replacing a PIX 520

jmia — Fri, 25 Feb 2005 16:03:35 GMT

Rob,

As per 525 documentation :

PERFORMANCE SUMMARY

• Cleartext throughput: Up to 330 Mbps

• Concurrent connections: 280,000

• 168-bit 3DES IPSec VPN throughput: Up to 145 Mbps with VAC+ or 72 Mbps with VAC

• 128-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+

• 256-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+

• Simultaneous VPN tunnels: 2000

More Info:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b09.html

Hope this helps

Jay

Re: Replacing a PIX 520

scoclayton — Fri, 25 Feb 2005 17:05:13 GMT

Just to add to this, there is no concept of a connection based license in the PIX anymore. PIX's are licensed now based on either a Restricted, Unrestricted, or Failover license now. These licenses really equate to number of interfaces supported per platform, etc...

Hope this helps.

Scott

Re: Replacing a PIX 520

rob.wright — Fri, 25 Feb 2005 18:16:26 GMT

Thanks for the quick response. This is very helpful.

Rob.