I am looking at purchasing the PIX 501 with 10 user licenses. The product manual says:
The Cisco PIX 501 Firewall 10-user license supports up to 10 concurrent source IP addresses from your internal network to traverse through the PIX 501. The integrated DHCP server supports up to 32 DHCP leases.
If I run a web server for outside/inside will my connections be limited? Or is it just inside/out connections that have limits?
Only translations are counted. The static web server will only count as 1-user toward the license, no matter how many connections inbound come to it. This leaves you with 9 remaining available connections.
We have two PIX 501 one is in front of a 10-user LAN with an Exchange server on the protected side and use NAT and have opened port 25 through the PIX. The Exchange server opened five connections during the two hours it was in service. Only five of the 10 LAN user had Internet access. We tried to modify the default TIMEOUT settings but still had users with limited Internet access.
We found that the 10 user license was for ANY 10 connections through the PIX, it didn't matter whether the connections were inbound or outbound. If it passed through the PIX it counted. I wouldn't use this to protect a very active web/e-mail server.
We had to order the 50-user license upgrade. This PIX 501 is also the termination of a 3DES VPN. I'll be monitoring the CPU load.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :