Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
We mentioned previously the importance of matching the model of PIX firewall you deploy to the demands you place on it. You need to consider several factors in addition to the amount of traffic you are passing. Table 12.3 summarizes the loads that each model can handle, including information about encryption. Ensure that your design considers these load limits.
| Model | Hardware Maximums (CPU/SDRAM/FLASH | Clear-text Throughput | DES IPsec Throughput | 3DES IPsec Throughput | Simultaneous VPN Tunnels |
|---|---|---|---|---|---|
| 501 | 133MHz AMD SC520 16MB RAM 8MB Flash | 10Mbps | 6Mbps | 3Mbps | 5 peers |
| 506E | 300MHz Intel Celeron 32MB RAM 8MB | 20Mbps | 20Mbps | 16Mbps | 25 peers |
| 515E | 433MHz Intel Celeron 64MB RAM 16MB Flash | 188Mbps | 33-120Mbps | 63Mbps UR 22Mbps R | 2000 |
| 525 | 600MHz Intel Pentium III 256MB RAM 16MB Flash | 360Mbps | 120-140Mbps | 70Mbps | 2000 |
| 535 | 1GHz Intel Pentium III 1GB PC133 RAM 16MB Flash | 1Gbps | 200Mbps | 100Mbps | 2000 |