Hey guys,
My workplace has approved a major upgrade of our network, I'm new in this role and I was shocked to see they have no security beside the isp's "guaranteed" security, so after putting a strong case forward we are good to go on a major upgrade, but I'm having trouble finding a cisco product that will have enough performance to encrypt at 10gbps....juniper have the 3600 which will do it, but trying to find a cisco product has so far been fruitless......
Any suggestions?
We will need 2 of them, one in each data centre (connected with 10gbps fibre) and 16 smaller ones for the nodes (not a problem)
Thoughts?

Sent from my Desire HD using Tapatalk 2

Why not use the Juniper?

_________________
www.mellowd.co.uk/ccie/

I have no experience with juniper unfortunately, I know the principles are the same, I just feel "better" with cisco, I already have to deal with HP switches, and I hate them lol buggy upgrades.....
Thanks guys


Sent from my Desire HD using Tapatalk 2

Do you need wire rate 10GE (full duplex) of crypto? If so, that's gonna be tough to accomplish in one box. 10GE (full duplex) is actually 20 gbps of crypto traffic. Knowing your traffic patterns is going to be important when sizing a box, 1 gbps of crypto with 64 byte frames is much different than with 1518 byte frames.

I would start looking at an ASR with an ESP-40.

_________________
http://networking.ventrefamily.com

Cisco makes 4 versions of ASAs will do that much VPN, but will set you back quite a bit...

http://www.cisco.com/en/US/products/ps6 ... tml#~tab-c

_________________
"A problem well stated is a problem half solved". (Charles Kettering)

Perhaps you're after something like this?

http://www.safenet-inc.com/products/dat ... ncryption/

Thanks guys, currently getting a price on cisco and juniper solutions, will report back........

Sent from my Desire HD using Tapatalk 2

Maybe I am reading the table wrong, but the 5585x-SSP60 shows VPN at 5Gbps. None of those devices will do VPN at 10Gbps.

-Otanx

After talking to management and the server guys today, we've come to the agreement that San replication will not be encrypted, so we'll be fine with the asa, on a side note our HP core switches that we upgraded firmware last week....need to be downgraded, snmp not working properly, strange ospf multicasting errors.....hp hmmmmm ya killing me!

Sent from my Desire HD using Tapatalk 2