Difference b/w PIX & Router ( Router with Firewall Feature Set )

[rmujeeb81]

Hi All,

I want to know that how we can differ PIX with Router( Router with Firewall feature set ) bcz router also can do Staefull Packet Filtering. What feature of PIX which considered by customer to use PIX instead of Router.

Thanks & Regards,

Mujeeb

[haithamnofal · Accepted solution]

Hi,

There was a discussion in this forum about this topic; check "Firewalling: PIX vs IOS Firewall" last conversation was posted on Jan 10, 2006. Let me know if this helps.

Rgrds,

Haitham

[scottmac]

Check out the suggested thread. In a nutshell, the router is doing the firewall in software, and tends to be slow. It's also a fairly CPU intensive process, so "smaller" and older routers tend to choke with higher traffic loads. The (newer) PIX are optimized for firewall functionality.

THE EXCEPTIONS are the new ISR routers (871, 1811, 2811, 3811 ...) they have much beefier processors, and additional support components that give them much better firewall and IDS/IPS capability.

The ISR can also be configured for a better SRST gateway used in VoIP versus the older routers.

Using one of the ISRs, you also have (DUH!) routing capability that the PIX does not give you.

If you decide to go with the router, use one of the ISRs. If you only need a firewall, but *might* need other features later, go with an ISR.

If you only need a firewall(and you're pretty sure that's all you'll need), then go with a PIX .... or possibly an ASA, which is a newer poduct and will probably replace the PIX someday.

Good Luck

Scott