tubbynetreminds me of the danse russePremium,MVM
reply to sk1939
said by sk1939:look at the registry entries for the rir that handles europe. you'll get a good idea of the blocks allocated.
I really want to block the entirety of Eastern Europe, but I can't think of an easy way to create a rule to block that many various IP's.
srx100 or srx240 would fit the bill nicely. i believe the 240 gives you clustering abilities, where the 100 doesn't. nice feature to have if you standardize on a platform at all sites, as it allows you to scale accordingly. in terms of raw performance -- the srx line is monsterous and will eat just about anything out there in the same size class.
Funny you mention the SRX line, I'm thinking of replacing the SSG with an SRX100or MAG2600 for VPN/IPS performance.
"...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..."
I was referring more to the entry of the giant list of IP addresses into the SSG.
I'll get a price quote for the 240 and see, but we have more Cisco gear than not on the remote sites. There are only a handful of SSG5's floating around. Also I just notice that the 240 is 4x the cost, so I'll have to take that into consideration as well.