PIX Restricted vs Unrestricted

[prafuljaded]

Hi All,

I have PIX 515 UR bundle running 6.3(3) in a failover setup.I have over 50 IPSec VPN tunnels,web traffic,NAT going through it and the memory used is around 60MB out of 128MB.

I now have a new PIX 515E in test setup running 6.3(4) and Restricted bundle.I dont have much configuration on this test PIX 515E and still see around 60MB memory used. I want to bring this new PIX live for sometime during relocation (until we move the old PIXes). I was just wondering if the Restricted vs Unrestricted (R vs UR) bundles is causing to use so much memory.

1)Do we see IPSec performance difference issues between the R & UR.

2)Will I be able to load my IPSec traffic on this new PIX 515E ?

3) Should I go for the UR 515E ?

Thanx,

Praful

[sachinraja]

Hello praful,

you can load ipsec traffic on your new PIX 515 E... but you need to set this up with a new IP and put parallel to the old pix... i hope you are not trying to put this as failover to the previous pix, since R licenses dont support failover...

Try configuring ipsec with the new pix and see if it works.. i dont see any performance difference with respect to licensing.. licensing just authorizes you to some advanced functions like failover/interfaces etc... the hardware remains the same, unless u do a DRAM or flash upgrade after purchase...

Do let us know if you need more info...

Raj

[prafuljaded]

Hi Sachin,

Thanks for ur reply.But I was referring to the below posting and it says there is some performance issue.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1dd7891f/0#selected_message