To the Cisco guys

[Goosemaster]

It definitely looks neat, but it seems like a swiss army knife that might cost too much for non centralized IPS/IDS or VPN usage.

Bascially, as a sole remote site device it looks great, but I'm guessing that it might be to expensive if you only use it for some of the features....

Then again, I am only a student.


What do you make of it? Anyone actively using it?


If so do tell

 

[spidey07]

don't have any experience, but it still goes against design rule #1.

routers route
firewalls firewall

you can't be excellent at both.

 

[Goosemaster]

Originally posted by: spidey07
don't have any experience, but it still goes against design rule #1.

routers route
firewalls firewall

you can't be excellent at both.

I was pretty sure that that was ghoing to be the conclusion. My Dad and I are starting a contracting firm (he used to do msot of his own work and we are going for the big time) and I jsut want to keep thigns in mind.

Assoon as january we will be totting a tablet pc and have an IPsec VPN to the house via Verizon's EVDO wireless service....as the custermer base grows and as the information starts becoming more valuable, I am keeping my eye out for what well need.

Hopefully my cisco 2610 with IOS 12.5 (# incorrect i think) and IP plus will serve us well for a bit

 

[nightowl]

While the ASA can run the services simultaneously, it also makes sparing easier as well as it being a flexible box. Also, you do not have to replace the entire box if you need to change it's function in the network.

 

[Goosemaster]

Originally posted by: nightowl
While the ASA can run the services simultaneously, it also makes sparing easier as well as it being a flexible box. Also, you do not have to replace the entire box if you need to change it's function in the network.

True.

Any idea how they compare to sa standalone SSL VPN solution?

 

[bgroff]

Spidey -

The ASA 5500 is a pix. It runs pix code. Its not a router. I think you're getting this confused with the new router platform, aka the ISR. The ASA 5500 is the way to go for firewalls if you're looking at cisco since you get bigger, better for the same money or less than a comparable Pix.

 

[nightowl]

Any idea how they compare to sa standalone SSL VPN solution?

Not sure what you are referring to there, Goosemaster

bgroff,

Spidey was using that as an example of keeping services seperate on the network.

 

[spidey07]

exactly, more of I prefer a segregation of duties and structured/scalable designs.

But for a small office where powerful routing features aren't required a firewall works well.