topic Re: Learning - Testing pix, What should i purchase in Network Security

Learning - Testing pix, What should i purchase

cnewman1000 — Fri, 21 Feb 2020 07:33:15 GMT

Hi,

I currently have a pix classic, i am using this to learn - testing.

I would like to be able to upgrade to the latest PIX OS, (the classic can only support ~5.1)

I have about 10 PC's on my Home Lab. I do not want to purchase anything fast, expensive.

I was looking at the 501, if anyone could recommend a model that supports the latest OS, has as many features as possible, but a low end?

Thanks

Re: Learning - Testing pix, What should i purchase

shamilton-wilkes — Sun, 08 Aug 2004 18:53:23 GMT

Any 501 will do. If you can afford a 506 though, then you'll be able to use VLANs so you can practice with multiple interfaces etc. 6.3.4 is current. 7 will be out for 515+ later this year, but 501 & 506 won't support 7 'till 7.1 arrives next year.

Re: Learning - Testing pix, What should i purchase

cnewman1000 — Mon, 09 Aug 2004 10:14:06 GMT

Thanks for your reply, was a great help

I have been think how I need to setup my lab.

I think I may need a DMZ, (or not sure if i can do this with a vlan)

I would like to use one interface for my lan, one for the wan, and I would like another for my live web server.

Will the 506 be able to do this? Or will i need a device that can take 3 interfaces?

Thanks

Re: Learning - Testing pix, What should i purchase

mostiguy — Mon, 09 Aug 2004 12:38:40 GMT

you need to assess whether a pix 515 or 515e, new or used (as they have a minimum of 3 physical ints), is more expensive than buying a 506 along with a managed switch that you can create vlans with.

Re: Learning - Testing pix, What should i purchase

cnewman1000 — Fri, 13 Aug 2004 04:55:09 GMT

Thanks for your reply,

So if I got the 506, i could setup VLANS (i have a 2950 switch), and this would allow me to have a DMZ of sorts?

Thanks

Re: Learning - Testing pix, What should i purchase

prasadrp — Fri, 13 Aug 2004 10:28:51 GMT

501/506 do not support vlans. The entry level model which supports vlans currently is 515E

Re: Learning - Testing pix, What should i purchase

scoclayton — Fri, 13 Aug 2004 12:20:03 GMT

This information is outdated. 6.3(4) adds support for 2 logical interfaces on the 506/506E series PIX's. Still no .1q support on the 501 series PIX's.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63rnotes/pixrn634.htm#wp159177

Scott

Re: Learning - Testing pix, What should i purchase

prasadrp — Fri, 13 Aug 2004 17:23:10 GMT

Thanks for the update. That's great news.