Cisco's PIX family firewalls and ASA Series firewalls combine next-generation firewall, intrusion protection, and Virtual Private Network (VPN) features in a cost-effective, single-box format. Both product series deliver powerful user and application policy support, mutlivector attack protection, and secure access features. The increased intelligence sharing of integrated security services in a stand-alone package provides users implementing these integrated solutions the advanced of enhanced security, reduced COI, and less operational expense.

PIX security appliances and the ASA 5500 family combine with IOS Firewall, the Firewall Services Module for Cisco Catalyst 6500 Series switches, and 7600 family routers as components of Cisco's flexible, integrated firewall line. Engineered with an expandable, modular approach, every device is designed with a particular feature set to deliver more efficient security to different network situations. These solutions can be individually deployed to secure specific facets of the connectivity infrastructure, or can be grouped for a systematic, protection-in-depth approach following the design best practices described in the Cisco SAFE framework. Completing the modular firewall product line, Cisco provides a comprehensive security management catalog, spanning Cisco security device and IOS security components and built-in appliance managers, to self-contained management applications, helping to make sure that customers can effectively manage their Cisco security solution investments.

PIX Security Appliance Series
The market-leading Cisco PIX Security Appliance Series deliver robust user and application policy support, multivector attack defense, and secure networking services in cost-effective, simple-to-configure solutions. These purpose-built devices offer a broad range of built-in protection and connectivity capabilities including state-of-the=art process-aware firewall services, industry-leading Voice over IP and multimedia security, reliable site-to-site and remote-access IPSec VPN networking, fault tolerance, smart networking features, and flexible management solutions. The PIX firewall Appliance family ranges from small plug-and-go devices for small offices and home offices to stackable high-bandwidth appliances with greater ROI for large business and service-provider customers, PIX Security Appliance Series deliver high levels of protection, speed, and availability for environments of any size.

PIX Firewalls Consultants
Based around a tested, specialized operating system that delivers a wealth of protection services, Cisco PIX firewall appliances offer the advanced security and have received many industry evaluations including EAL 4 status, plus ICSA Labs Firewall and IP Security qualification. Cisco PIX firewall appliances provide advanced protection for a broad array of Voice over IP and other multimedia standards such as H.323 v. 4, Session Initiation Protocol (SIP), SCCP, Real-Time Streaming Protocol, and Media Gateway Control Protocol (MGCP), enabling businesses to secure deployments of a wide range of current and next-generation Voice over IP and mixed-media solutions.

PIX security appliances offer a wealth of configuration, monitoring, and troubleshooting features, providing businesses the flexibility to utilize the techniques that most closely match their needs. Management solutions cover the gamut from centralized, policy-based administration utilities to integrated Web-accessible management to support for remote-monitoring protocols like SNMP and syslog. The integrated Adaptive Security Device Manager interface provides a world-class Web-based control solution that greatly simplifies the deployment, in-place configuration, and monitoring of a specific Cisco PIX firewall appliance without the need of any additional utility other than an ordinary browser and Java plug-in to be installed on a manager's computer. IT managers can furthermore remotely configure, monitor, and troubleshoot PIX firewalls via a command-line interface. Secure command-line interface access is possible through a number of methods, such as Secure Shell (SSHv2) Protocol, Telnet over IP Security (IPSec), and out-of-band through a console port. Cisco PIX firewall appliances also include dependable automatic-update features, a set of advanced secure remote-administration options that make sure that security settings and software images are always up to date. In addition, PIX firewall appliances are supported by several configuration and tracking tools offered by Cisco AVVID (Architecture for Voice, Video and Integrated Data) partners.

Cisco ASA 5500 Series Firewalls
Cisco ASA 5500 Series Firewalls are specially engineered solutions that incorporate advanced, best-of-breed protection and Virtual Private Network support plus an innovative, flexible architecture. The end product is a robust, versatile network protection solution better suited to protect small and medium company and enterprise networks and, at the same time, lower the overall deployment and maintenance expenses associated with this unprecedented level of protection.

>Cisco ASA Firewalls Consulting
Cisco Adaptive Security Appliances (ASA) 5500 Series Firewalls leverage technology behind the PIX 500 Series firewall, Cisco's IPS 4200 Series Intrusion Prevention System, and the Cisco VPN 3000 family concentrator. These solutions converge on the Cisco ASA Firewall product line to offer a firewall that defends against the broadest range of attacks. Cisco Adaptive Security Appliances 5500 Series Firewalls deliver program security, anti-X safety, network containment and control, and clean VPN functionality throughout Cisco's product portfolio. This breadth of security allows defense of any network section, which includes the most typical attack vectors such as remote locations, LAN-attached internal users, and remote connected Virtual Private Networks.

Cisco ASA 5500 Series firewalls provide strong application security through smart, application-sensitive inspection processes that analyze traffic at Layers 4-7. This results in a better protected environment covering Web, voice, and 3G-mobile wireless services. To protect environments from application-layer assaults and to offer businesses more policing of the applications and protocols used in their networks, Cisco's inspection engines integrate extensive application and protocol knowledgebases and employ protection enforcement solutions such as anomaly sensing and state monitoring. Also incorporated are assault sensing and remediation technology including application/protocol command filtering and content verification. Cisco Adaptive Security Appliances firewall inspection engines also deliver control over IM and peer-to-peer file sharing, enabling businesses to enforce usage policies and recover bandwidth for vital business processes.

At the same time as improving network security, Cisco Adaptive Security Appliances 5500 Series firewalls also lower deployment and support expenses. By providing broad Virtual Private Network and security services, the Cisco Adaptive Security Appliances (ASA) 5500 Series firewall can be used as the single device for many uses, allowing platform standardization. The Cisco Adaptive Security Appliances firewall can be deployed as a consolidated threat-protection appliance at a central location by leveraging its access control, process inspection, and worm, virus, and other malware mitigation technologies. The Cisco Adaptive Security Appliances (ASA) firewall can also be used as a specialized remote connectivity device using its Virtual Private Network features. Alternatively, the Cisco Adaptive Security Appliances (ASA) firewall operates capably inside the network for inter-office connectivity management and to guard against malware internal workers may inadvertently release into the network. In small business and branch office environments, the Cisco ASA 5500 Series firewall serves as an all-in-one device offering complete intrusion prevention and Virtual Private Network services while suiting the cost structure and operational demands of these deployments. This versatile one-platform, multiple-use approach lowers the amount of platforms that must be installed and maintained while providing a common operating and administrative system across all those installations. This approach streamlines the education of setup, monitoring, support, and protection staff. To further reduce operations expenses, Cisco Adaptive Security Appliances (ASA) firewalls are also highly network aware, enabling these devices to insert gracefully into the network without interfering with authorized traffic and applications.

How Progent's Consultants Can Assist Your Business with Cisco Firewalls
Cisco PIX family firewalls and ASA Series adaptive security appliances provide a wealth of configuration, tracking, and troubleshooting options that offer you the flexibility to deploy these security appliances to match your business requirements. Progent's CISM certified network security experts can assist you to develop a security policy appropriate for your situation and can set up your security appliance to enforce your security strategy. Progent's CISA-qualified IS security auditing professionals and GIAC-qualified network security consultants can assess the effectiveness of your current firewall deployment and audit the security of your entire IT network. Progent also knows how to troubleshoot your firewall both remotely or onsite, and can educate your existing IT maintenance staff to set up and maintain your PIX or ASA firewalls.

Integration of Cisco and Third-party Security Technology
Progent offers expertise in firewall and VPN products from all major vendors and can help you integrate Cisco technology with additional security solutions to help you build a cost-effective network infrastructure that provides a level of security and flexibility appropriate for your business. Third-party firewall and VPN support services available from Progent include:

  • Check Point Software Consulting
  • Watchguard Consulting
  • Juniper Networks NetScreen Consulting
  • SonicWALL Consulting
  • Symantec Raptor Consulting

    To find out about Progent's consulting and support services for additional Cisco products and technologies, select a topic: To see additional information about Progent's consulting expertise for Cisco technology, select a topic:

  • Introduction to Progent's Cisco Support
  • Fast Access to a CCIE Consultant
  • Cisco Routers Professional Expertise
  • Cisco Wireless Professional Help
  • Cisco VoIP Engineering Support
  • Cisco Switches Engineering Services
  • Cisco Security and VPN Professional Help
  • Design and Support for Cisco Data Centers
  • Consulting Expertise for ISPs
  • Network Management Help for Cisco-powered Networks

    For more information about Progent's consulting and support services for Cisco technology, call 1-800-993-9400 or send email to security-help@progent.com.
















    © 2002-2008 Progent Corporation. All rights reserved.

    More topics of interest: