Designing and Building Enterprise DMZs

The PIX is a network security appliance with a purpose-built operating system, which reduces the risk of security flaws inherent in firewalls built on general-purpose operating systems.
The ASA is a network security appliance based on the PIX operating system, which includes advanced IPS and Anti-X functionality into a single purpose-built device.
There are five PIX models that can provide a high level of security and performance for networks of any size, from SOHO to a large enterprise or service provider.
There are four ASA models that can provide a high level of security and performance for networks of any size, from SOHO to a large enterprise or service provider.
The Adaptive Security Algorithm (ASA) allows the PIX to provide stateful inspection firewall services, track the state of all communications, and prevent unauthorized network access.
The fact that the PIX/ASA has a purpose-built operating system does not mean it does not have the features of a firewall built on a general OS. In fact, the PIX/ASA has a strong security algorithm along with features that include but are not limited to URL filtering, content filtering, DHCP, and intrusion detection.
In addition to securing the network, the PIX can support mobile user and site-to-site VPNs.
The ASA devices can be configured in one of five editions: Firewall Edition, IPS
Edition, Anti-X Edition, VPN Edition, and Business Edition.
The PIX and ASA share a common OS.The latest main release of...