https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66468#M688032 <HTML><HEAD></HEAD><BODY><P>The PIX and IOS firewall are similar in how they handle the traffic. The question you want to ask is &#147;do I want to take a performance hit on my router to handle firewalling?&#148; In small networks, the performance hit is negligible. In larger networks, it&#146;s higher. I prefer to have a single machine (PIX) dedicated to firewalling and just let the router route. </P></BODY></HTML> Thu, 27 Sep 2001 21:04:25 GMT thomas.chen 2001-09-27T21:04:25Z https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66467#M687996 <P>What are some major differences between Cisco PIX and an IOS firewall? Thanks in advance.</P> Fri, 21 Feb 2020 05:50:45 GMT https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66467#M687996 robert.leung 2020-02-21T05:50:45Z https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66468#M688032 <HTML><HEAD></HEAD><BODY><P>The PIX and IOS firewall are similar in how they handle the traffic. The question you want to ask is &#147;do I want to take a performance hit on my router to handle firewalling?&#148; In small networks, the performance hit is negligible. In larger networks, it&#146;s higher. I prefer to have a single machine (PIX) dedicated to firewalling and just let the router route. </P></BODY></HTML> Thu, 27 Sep 2001 21:04:25 GMT https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66468#M688032 thomas.chen 2001-09-27T21:04:25Z https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66469#M688059 <HTML><HEAD></HEAD><BODY><P>I agree with the previous reply and also found this white paper by Cisco as to when to specify</P><P>the PIX box vs the router with IOS firewall feature set.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/warp/customer/cc/pd/rt/2600/prodlit/flrrr_ov.htm" target="_blank">http://www.cisco.com/warp/customer/cc/pd/rt/2600/prodlit/flrrr_ov.htm</A></P><P></P><P>My question is, for the NIMDA worm, Cisco came out with a paper on house to use NBAR on</P><P>the router to stom NIMDA attacks. They did the same for the Code Red virus. However I did not</P><P>see how to do this same thing on the PIX box. Do you udate some signature file on the PIX</P><P>box with new attack signatures for code red and NIMDA? Did they come out with these</P><P>signatures for the PIX as quickly as they did for the firewall feature set?</P></BODY></HTML> Fri, 28 Sep 2001 14:26:43 GMT https://community.cisco.com/t5/network-security/pix-vs-ios-firewall/m-p/66469#M688059 fjordan 2001-09-28T14:26:43Z