 tubbynetreminds me of the danse russePremium,MVM join:2008-01-16 Chandler, AZ kudos:1 | reply to sk1939
Re: Russians said by sk1939:I really want to block the entirety of Eastern Europe, but I can't think of an easy way to create a rule to block that many various IP's.
look at the registry entries for the rir that handles europe. you'll get a good idea of the blocks allocated.
Funny you mention the SRX line, I'm thinking of replacing the SSG with an SRX100or MAG2600 for VPN/IPS performance.
srx100 or srx240 would fit the bill nicely. i believe the 240 gives you clustering abilities, where the 100 doesn't. nice feature to have if you standardize on a platform at all sites, as it allows you to scale accordingly. in terms of raw performance -- the srx line is monsterous and will eat just about anything out there in the same size class.
q. -- "...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..." |
 sk1939Premium join:2010-10-23 Washington, DC kudos:9 Reviews:
·T-Mobile US
1 edit | I was referring more to the entry of the giant list of IP addresses into the SSG.
I'll get a price quote for the 240 and see, but we have more Cisco gear than not on the remote sites. There are only a handful of SSG5's floating around. Also I just notice that the 240 is 4x the cost, so I'll have to take that into consideration as well. |