Sort of depends on what features you'd like. Both have there benefits and disadvantages. Personally, if I was implementing primarily a client VPN solution, I'd go for the 3015 since it has more features for client-based VPN's, like client firewall checking, max simultaneous logins, login banner, etc. Over time though these features will probably be put into the PIX, but it'll take a while. I find the management and configuration of the 30xx easier than the PIX also. The 3015 is easily upgradable to HW encryption which'll give you more capacity. The 30xx does have a load-balancing feature also which is quite good if you have more than one.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...