Netscreen vs. Cisco ASA

Choose the system you can work with. Your Cisco IOS experience is not that helpful on ASA, but it might cut down the learning step.

The 5GT might be just a bit too small for the task, since the standard license only gives you 10 tunnels to work with. So if you plan to expand on the number of tunnels in the near future you either need an extended license for the box, or a bigger box with higher limits.

The 5GTs basically come in 3 flavors:

License Users Sessions Tunnels

10-user 10 2000 10 Plus unlim 2000 10 Extd. unlim 4000 25

("get license" on the cli will get you the license and limits on the box)

If you plan to do granular acls you might also hit the 5GT limit of 100 acls.

Myself, I find the PIX syntax somewhat arcane and unintuitive. YMMV though. The Netscreens are IMHO straight forward to configure. But as Lutz wrote, use the box you can work with best _and_ that fits the requirements.

Ciao Chris

--=20 All diese Momente werden verloren sein in der Zeit, so wie Tr=E4nen im Re= gen Dipl-Ing (FH) Christian 'Dr. Disk' Hechelmann IRC: DrDisk GPG Fingerprint: 53BF634B 28326F92 79651A15 F84ABB55 4F068E4E Ich finde, scharfe Waffen und "Feuer nach eigenem Ermessen" sollte zum Adminjob dazugeh=F6ren. [Lars Marowsky-Bree in d.a.s.r]

FWIW: dialup VPNs don't usually use tunnels in Netscreen terminology. The 10 tunnel limit is more along the lines of site-to-site VPNs.

I usually use up the limited session counts on the 5GT before anything else.