[Stealth]

I need to be able to do at least ONE of the following, preferably most of them to some extent:

-- monitor websites being viewed
-- limit bandwidth to certain people (i.e. this person's workstation, at IP address 1.2.3.4, is limited to 20k/sec)
-- if possible, view internet bandwidth used per IP or person. now THAT would really come in handy
-- view aggregate network traffic over the outbound (internet) interface on the firewall.

bottom one's the easiest, i need to do #1 and #2 without paying a couple thousand for a solution.  was thinking about just setting up a linux workstation as a router between the cisco PIX and the switches, which i think is the first step, but are there modules to be able to do the above?

or if anyone has any suggestions in this regard, please let me know

[Martinus]

[color=66ff00]Regarding number 2, a quick primer: Link

Number 3: Link

Not having used these features myself I can't vouch for their workability unfortunately.
[/color]

[Kamikaze]

If you already have a system set up, you could try Shorewall. It's a firewall configuration tool that handles most of those criteria.

Or you could get a firewall distro like m0n0wall (FreeBSD based), IPCop or Smoothwall.