Should I need to protect my dialup and dedicated customers

[noc]

We are an ISP having a PIX 525 with unlimited license bundle and a total of 6 connected interfaces. Presently we are protecting 3 different internal networks from the Internet. We are interested to protect our dialup and dedicated Internet customers as well. Is it recommended to do so as we suspect that it would put excessive load on system performance with a slower access for customers. We have about 1600 dialup ports and 30 dedicated ports. Any suggestions ??????????

[Philip D'Ath]

I think this is likely to cause you grief.

Some customers will be wanting to run services that support inbound connections. This will be hard to config around, while still providing any protection of any value.

Your customers will also have many different security profiles. Trying to meet the needs of all of these with one device wont work.