Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Difference b/w PIX & Router ( Router with Firewall Feature Set )

Hi All,

I want to know that how we can differ PIX with Router( Router with Firewall feature set ) bcz router also can do Staefull Packet Filtering. What feature of PIX which considered by customer to use PIX instead of Router.

Thanks & Regards,

Mujeeb

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: Difference b/w PIX & Router ( Router with Firewall Feature S

Hi,

There was a discussion in this forum about this topic; check "Firewalling: PIX vs IOS Firewall" last conversation was posted on Jan 10, 2006. Let me know if this helps.

Rgrds,

Haitham

2 REPLIES
New Member

Re: Difference b/w PIX & Router ( Router with Firewall Feature S

Hi,

There was a discussion in this forum about this topic; check "Firewalling: PIX vs IOS Firewall" last conversation was posted on Jan 10, 2006. Let me know if this helps.

Rgrds,

Haitham

Green

Re: Difference b/w PIX & Router ( Router with Firewall Feature S

Check out the suggested thread. In a nutshell, the router is doing the firewall in software, and tends to be slow. It's also a fairly CPU intensive process, so "smaller" and older routers tend to choke with higher traffic loads. The (newer) PIX are optimized for firewall functionality.

THE EXCEPTIONS are the new ISR routers (871, 1811, 2811, 3811 ...) they have much beefier processors, and additional support components that give them much better firewall and IDS/IPS capability.

The ISR can also be configured for a better SRST gateway used in VoIP versus the older routers.

Using one of the ISRs, you also have (DUH!) routing capability that the PIX does not give you.

If you decide to go with the router, use one of the ISRs. If you only need a firewall, but *might* need other features later, go with an ISR.

If you only need a firewall(and you're pretty sure that's all you'll need), then go with a PIX .... or possibly an ASA, which is a newer poduct and will probably replace the PIX someday.

Good Luck

Scott

146
Views
0
Helpful
2
Replies
CreatePlease to create content