PIX instead of 2800 for external router?

[AnotherITguy]

Hello,


We currently have an external router and a seperate firewall solution in place. We're looking to purchase a Cisco 2800 series router to replace our current external router, and the question has been raised as to whether or not purchasing a PIX could instead replace both the 2800 and the current firewall solution. Is this a valid recommendation? Pros/Cons?

Thank you,


Jay

 

[lgarner]

Unless your internet connection is Ethernet, no. Pix doesn't support serial or other interface types.

 

[AnotherITguy]

Thank you for the reply. =) So is it safe for me to say that if you have a T1/T3/whatever pipe to your place of business that you NEVER use a PIX as your external device? It's ALWAYS a router? BTW -I'm not trying to be sarcastic, I'm just trying to make absolutely sure I understand... =)

Thanks,


Jay

 

[jpm121]

Always and Never are pretty big words -- soon as someone says that, another person will come in and say they do it all the time.

We'll say that "best practice" and "most common" configuration is Internet -> router w/ CSU/DSU -> PIX -> LAN.

Of course, you could also build a bunch of access-lists into your router and make it act like a firewall, sort of, kind of.

 

[AnotherITguy]

Thanks! =)