Cisco Secure PIX Firewall 525

The new Cisco Secure PIX 525 is the latest and largest addition to the PIX 500 series and is intended for Enterprise and Service Provider use. It has a throughput of 370 Mbps with the ability to handle as many as 280,000 simultaneous sessions. The 600 MHz CPU of the PIX 525 can enable it to deliver an additional 25-30% increase capacity for firewalling services.

The Cisco Secure PIX Firewall 525 is part of the world-leading Cisco Secure PIX Firewall series, providing today's networking customers with unmatched security, reliability, and performance. Ideal for protecting the Enterprise Headquarters' perimeter, the PIX 525 delivers full firewall protection, as well as IP Security (IPsec) virtual private network (VPN) capabilities.

Model : PIX-525-R-BUN
Price : $10,599.00

Model : PIX 525-UR-BUN
Price : $14,299.00

Call 888-219-0207 or e-mail sales@etribeca.com

Strongest Security

The growth of the Internet has resulted in increased security risks to corporate, government, and private networks. Existing solutions such as proxy-based firewalls that run at the application level have many limitations, including slow performance, the need for costly general-purpose platforms, and the security risks inherent in using an open system such as UNIX.

The Cisco Secure PIX Firewall offers an unprecedented level of security protection. At the heart is a protection scheme based on the Adaptive Security Algorithm (ASA), which offers stateful connection-oriented firewalling. Stateful security is less complex and more robust than packet filtering. It also offers higher performance and is more scalable than application-level proxy firewalls. The ASA tracks the source and destination address, Transmission Control Protocol (TCP) sequence numbers, port numbers, and additional TCP flags of each packet. Access is permitted through the Cisco Secure PIX Firewall only if an appropriate connection exists to validate passage. This gives organizations transparent access for internal and authorized external users, while protecting internal networks from unauthorized access.

The real-time embedded system also enhances the security of the Cisco Secure PIX Firewall series. Although UNIX servers are ideal open-development platforms with widely available source codes, such general-purpose operating systems provide less-than-optimum performance and security. The dedicated Cisco Secure PIX Firewall series is designed specifically for secure, high-performance protection.

Secure VPN Interoperability with IPsec

Firewalls have traditionally provided perimeter security by maintaining stateful control of all connections between connected network segments. Today, more and more customers are looking to the firewall for VPN services in addition to access control. With a VPN, remote users or distributed branches can securely access corporate networks at a low cost. Using the Internet for access dramatically reduces the telecommunications costs associated with previous leased-line or other dedicated networks. Companies also no longer need to maintain large modem banks and access servers—a large capital outlay and administrative headache—to handle remote dial-in users. With just a local phone call to an Internet Service Provider (ISP), users can securely access private corporate intranets over the Internet.

The PIX 525 enables secure private communications over the Internet or any IP network. It integrates key features of VPNs—tunneling, data encryption, security, and firewalling—to provide a secure, scalable platform to better and more cost-effectively accommodate remote-access, remote-office, and extranet connectivity using public data services. The PIX 525 provides users with a complete implementation of IPsec standards. IPsec ensures confidentiality, integrity, and authenticity. For secure data encryption, Cisco's implementation of IPsec supports both the 56-bit Data Encryption Standard (DES) and 168-bit Triple DES algorithms.

Extremely Reliable

The PIX Firewall offers unsurpassed reliability, with a mean time between failure (MTB) of more than 60,000 hours. Even with this level of dependability, organizations whose Internet, intranet, or extranet connections are their corporate lifeline know that firewall redundancy is critical. Every minute a firewall is down means lost revenue, opportunity, or critical information. Cisco has created a failover bundle package for use with the PIX 525-UR, enabling this need to be met simply and inexpensively. This package provides organizations with a second firewall designed to run exclusively in failover mode, for a fraction of the cost of a standard PIX 525-UR bundle.

Amazing Flexibility

The Cisco Secure PIX Firewall 525 supports a broad range of network interface cards (NICs). Standard NICs include single-port or four-port 10/100 Fast Ethernet, Gigabit Ethernet, 4/16 Token Ring, and dual-attached multimode FDDI cards.

The PIX 525 also offers multiple power supply options. Users can chose between AC or a 48 DC power supply. Either option can be paired with a second power supply for the ultimate in redundancy and high-availability.

Key Features and Benefits

• Part of a Cisco End-to-End Solution—Allows businesses to extend a cost-effective, seamless network infrastructure to the branch office
• Lowest Cost of Ownership—Simple to install and configure, resulting in little network downtime. In addition, permits transparent support of Internet multimedia applications, eliminating the need to physically modify and reconfigure each client workstation or PC
• Non-UNIX, Secure, Real-Time, Embedded System— Eliminates the risks associated with a general-purpose operating system and delivers outstanding performance
• Standards-Based VPN—Enables administrators to reduce the costs of connecting mobile users and remote sites to the corporate network over the Internet or other public IP networks
• Adaptive Security Algorithm—Provides stateful security for all TCP/IP sessions to protect sensitive, private resources
• Stateful Failover/Hot Standby—Delivers high availability to maximize network reliability
• Network Address Translation (NAT)—Saves costly IP renumbering; expands network address space; obscures IP addresses from the outside world
• Cut-Through Proxy—Offers highest authentication performance in the industry; lowers cost of ownership by reusing existing authentication database
• Multiple Network Interface Cards—Provides strong security for Web and any other publicly accessible servers, multiple extranet links to different partners, protected logging and URL filtering servers, and more
• Up to 280,000 Simultaneous Connection Support—Dramatically outperforms proxy servers, resulting in deployment of fewer firewalls
• Prevention of Denial-of-Service Attacks—Protects the firewall, as well as the servers and clients behind it from disruptive or damaging hackers
• Broad Range of Supported Applications—Reduces the impact of a firewall on network users
• Java Applet Filter—Enables firewall to stop potentially dangerous Java applications on a per-client or per-IP address basis
• Multimedia Application Support—Reduces administrative time and cost required to support these protocol; requires no special client configurations
• Easy Setup—Allows a general security policy to be implemented in as little as six commands.
• Compact Design—Requires only two rack units
• URL Filtering—Provides the ability to control which Web sites users visit and maintains an audit trail for accounting purposes, when combined with Websense Enterprise software; has minimum impact on PIX Firewall performance
• Mail Guard—Removes the need for external mail relay in the perimeter network and eliminates service-denial attacks on external mail relays

eTribeca, a Cisco Premier Partner with an in-house engineering staff, sells Cisco equipment and provides consulting and engineering services for the design, implementation and maintenance of networks.  Our friendly and knowledgeable Sales Engineers can be contacted for the latest and best prices by e-mail or phone at 888-219-0207.

eTribeca offers free demonstrations of the the latest WAN, Wireless Ethernet and Video Conferencing technology in our New York City showroom for qualified clients.  Call (212) 219 0207 to arrange an appointment.