Originally posted here by RoadClosed
I use the Pix as well. In fact I eat Pix for breakfast. However the same scenario say 2 firewalls each with DMZ and failover is significantly different in price. Watchguard 4k. Cisco 11K. (these are new prices) The cheap Pix 506 does not isolate a DMZ.
The requirements are met. Where did it say failover, 2 firewalls each with their own DMZ? That in and of itself says you'll be spending mucho dinero.

Anyway, I'm having trouble with my FreeBSD box, seems that if you have too many queues defined pf doesn't work well. Not stable at all. C-ya.