Hello
I have a new job with a school that has a 3Mbp Internet connection with a PIX 515UR with version 7 of the IOS and an ISA server. A few teachers VPN with PPTP to ISA and I can restrict them with packet filtering to a single IP address and port number. My supervisor wants a better VPN solution that can do what we do now plus make sure that the VPN user has a virus scanner and meets other requirements. I wanted to use PIX but ISA is in the way and VPN does not work. I have two choices (1) Convert ISA from firewall mode to poxy server mode so I can use PIX VPN features. (2) Purchase another device (Cisco ASA??) and install it in parallel to the PIX. I thought of purchasing a VPN only device but then I would still need a firewall unless I could somehow use it with the existing PIX firewall without changing anything with ISA. We expect about 15 concurrent users. We do have money in the budget so if installing a new device parallel to our PIX would work then we would want to do that. Most important is that we get the best VPN features possible, even if it means changing our network configuration. All our network switches are Cisco.
Thanks for your suggestions Elizabeth Kono