F/W Software or PIX for our site?

[f2b]

We have a 2811 without any Firewall feature.
Our site has no more than around 60 staff and less than 100 network devices. Please advise if I should be looking at firewall software for the 2811 or a PIX. If the PIX is a better option then which one would best suit?

Thanks

 

[mbilgrav]

I would go for a PIX515E, or maybe 506E can do the job aswell

 

[f2b]

Thanks, the 515E does look like the one. It mentions VPN. Can this also be used as a VPN gateway? Hard to tell on the cisco website. Currently we use VPN (VPDN) via the 2811 but not sure how many it can handle.

Thanks

 

[lgarner]

506 and 515 can be VPN endpoints. If you can do the 515, it's a good choice since it supports failover.

 

[f2b]

Thanks for the advice.