PIX Firewalls - Tell me your experiences

[ITV-U]

We are currently considering a network using a Cisco PIX 525.

We will have 8 videoconferencing rooms, 3+ Servers and more behind it on the network.

I have heard good and bad about using a firewall at all for VTC, but we need it for other purposes. Any suggestions or solutions.

[Glen Sykes]

The 525 should be able to handle your H.323 traffic ok in my experience. I have had no problems with PIX up to now once it has been configured properly and the 525 is a well specced firewall. The final consideration however is what sort of throughput you expect to be putting through it as well as the H.323 streams. If the firewall will be busy it may well be worth investing in the 535 firewall.

One other option to consider however is an application layer gateway, which would sit alongside your firewall 'straddling' both inside and outside networks and handling only your H.323 traffic.

[Sean Lessman]

We are currently considering a network using a Cisco PIX 525.

We will have 8 videoconferencing rooms, 3+ Servers and more behind it on the network.

I have heard good and bad about using a firewall at all for VTC, but we need it for other purposes. Any suggestions or solutions.

The only issue I have seen with PIX is H.235 encryption doesn't work through it if its in H.323 aware mode. However, with the firewall traversal technology (Ridgeway acquisition) we have in beta right now, everything works through the PIX. :)

Sean

[MKVAZ]

Sean,

I've been talking to a Tandberg sales rep about that new Ridgeway you are beta testing. It sounds very productive and easy. Do you know when they are going to thave the tech specs and white papers out on that ?