topic Re: PIX Performance Tuning in Network Security https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303941#M594344 <HTML><HEAD></HEAD><BODY><P>If my PIX is not doing any NATting, or Proxying, there's no need for the firewall to do anything above layer-4 (UDP/TCP ports). That's where the performance tuning comes in. The Fixups do things &amp; make decisions higher than layer-4, and the higher up in the OSI model you go, the slower you get. Granted my 525 has a Pentium-III processor at 600Mhz, and 256MB RAM.</P><P>-Alex</P></BODY></HTML> Mon, 23 Feb 2004 16:40:16 GMT abatson 2004-02-23T16:40:16Z PIX Performance Tuning https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303939#M594342 <P>Does anyone know of any third-party private sites that compile information on performance-tuning of the PIX? I'm looking for something along the lines of <A class="jive-link-custom" href="http://www.phoneboy.com" target="_blank">http://www.phoneboy.com</A> -which deals with CheckPoint FW-1.</P><P></P><P>I need to know the bare-bones of what I need running to support my functions &amp; nothing more. Example, if I'm not doing any NAT, there are a bunch of Fixups I don't need to have enabled, etc etc..</P><P>--Alex</P> Fri, 21 Feb 2020 07:15:32 GMT https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303939#M594342 abatson 2020-02-21T07:15:32Z Re: PIX Performance Tuning https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303940#M594343 <HTML><HEAD></HEAD><BODY><P>the pix, as it does not have much application level proxying, is one of the fastest firewalls out there. there really is not much to worry about. one thing to look for is reverse dns entries for all of your ip addresses in use, as if they are used for static/global commands for web browsing, the lack of reverse entries may slow things down. </P></BODY></HTML> Mon, 23 Feb 2004 16:10:57 GMT https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303940#M594343 mostiguy 2004-02-23T16:10:57Z Re: PIX Performance Tuning https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303941#M594344 <HTML><HEAD></HEAD><BODY><P>If my PIX is not doing any NATting, or Proxying, there's no need for the firewall to do anything above layer-4 (UDP/TCP ports). That's where the performance tuning comes in. The Fixups do things &amp; make decisions higher than layer-4, and the higher up in the OSI model you go, the slower you get. Granted my 525 has a Pentium-III processor at 600Mhz, and 256MB RAM.</P><P>-Alex</P></BODY></HTML> Mon, 23 Feb 2004 16:40:16 GMT https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303941#M594344 abatson 2004-02-23T16:40:16Z Re: PIX Performance Tuning https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303942#M594345 <HTML><HEAD></HEAD><BODY><P>You can turn the fixups off if you like...</P><P>no fixup protocol .........</P><P></P><P>chad</P></BODY></HTML> Thu, 26 Feb 2004 01:23:34 GMT https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303942#M594345 chadr 2004-02-26T01:23:34Z Re: PIX Performance Tuning https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303943#M594347 <HTML><HEAD></HEAD><BODY><P>As long as I'm not doing any NAT, you're certain that I don't need any fixups at all? Are there certain ones that are more resource intensive than others?</P><P>-alex</P><P></P></BODY></HTML> Thu, 26 Feb 2004 13:53:55 GMT https://community.cisco.com/t5/network-security/pix-performance-tuning/m-p/303943#M594347 abatson 2004-02-26T13:53:55Z