Cisco PIX® 506E and 515E Firewalls

I get asked this question about about once a week. So here is a quick guide to the differences between the "Enhanced" and older version of the Cisco PIX Firewall

Q. What does “E” stand for in the product name?

A. The “E” indicates that this is an enhanced version of the widely popular Cisco PIX^® 506 or 515 Firewall platforms. Enhancements include more powerful processors, which result in up to a two and one-half times increase in firewall and virtual private network (VPN) performance, depending on packet size. In the case of the Cisco PIX 515E models (with Unrestricted or Failover licenses), this enhancement also provides integrated hardware-based VPN acceleration.

Q. Are the E platforms substantially different from the Cisco PIX 506 and 515 platforms that I am already familiar with?

A. Although the enhancements to firewall and VPN performance are significant, the Cisco PIX 506E and 515E platforms offer the same form factor, flexibility, interface support, and Cisco PIX OS support as the Cisco PIX 506 and 515 models.

Q. What changes were introduced with the E platforms?

A. Table 1 gives details on the differences between the Cisco PIX 515 and 515E and the Cisco PIX 506 and 506E platforms.

Table 1: Differences Between Cisco PIX 515 and 515E and Cisco PIX 506 and 506E Firewalls

Cisco PIX 515 Firewall  Cisco PIX 515E Firewall  Processor 200-MHz Intel Pentium MMX 433-MHz Intel Celeron Firewall throughput* 146 Mbps 188 Mbps VPN throughput* 10-Mbps software 22-Mbps “R” models63-Mbps “UR” models Integrated hardware VPN acceleration No Yes, Unrestricted and Failover models Cisco PIX 506 Firewall Cisco PIX 506E Firewall Processor 200-MHz Intel Pentium MMX 300-MHz Intel Celeron VPN throughput* 10 Mbps 16 Mbps Power supply External power supply with 6-pin connector to Cisco PIX 506 External power supply with 8-pin connector to Cisco PIX 506E Fan Integrated fan for system cooling Significantly quieter fan (10 dB less), providing benefit for desktop-based deployments

*1500-byte packets

Q. How is the embedded VPN feature provided within the Unrestricted and Failover models?

A. These models incorporate the Cisco PIX VPN Accelerator Card (VAC), a hardware-based VPN accelerator that is designed not only to improve IP Security (IPSec) encryption processing, but also to maintain high-end firewall performance. It is integrated into Cisco PIX 515E firewalls that have an Unrestricted or Failover license. For more information about the Cisco PIX VAC, go to
Cisco PIX Modules

Q. What software versions are supported on the E platforms?

A. Cisco PIX Firewall software versions 5.2(7), 5.3(3), 6.0(2), and 6.1(2), as well as future versions, will provide support for the Cisco PIX 506E and 515E platforms.

Q. Can I configure a Cisco PIX 515E and 515 to work together in a redundant hot standby pair?

A. In order for Cisco PIX Failover functionality to work, you need to ensure that both units are the same model (one with a Unrestricted license and the other with an Failover license) and have the same software version, encryption licenses, Flash memory, and the same RAM. Failover between the Cisco PIX 515E and 515 is not supported.

Q. How long will the Cisco PIX 506 and 515 platforms be supported?

A. The support schedule for the Cisco PIX 506 and 515 platforms is as follows:

* Q/A was Copied from searching through Cisco’s Site.