topic Re: comparing ASA with PIX (pix 515E) in Network Security

comparing ASA with PIX (pix 515E)

beheerggd — Mon, 11 Mar 2019 10:09:42 GMT

Hi all,

In my organization we have a pix515e. We want to buy a failover pix, but now they recommend us to put away our pix and buy an ASA.

Can you tell me what are the differences between ASA and PIX.

Is the configuration a bit the same on both platforms? With my knowledge of pix, can I configure an ASA too?

Thanks,

Stella

Re: comparing ASA with PIX (pix 515E)

JORGE RODRIGUEZ — Sun, 06 May 2007 12:05:39 GMT

Stella, with your knowledge of PIX 515e you should be able to quickly learn the new ASA plaform, personaly I have not used the ASA but rather PIX515e and 501s, I bought a ASA book with the intend to learn what I currently support in which shows command syntax for both the PIX500s and ASA, the CLI is same, but It is obious as in any new platform that we are face with new CLI and features to learn, the ASA is the next generation for cisco's security applience ASA's functionality is far more widen that that of PIX500s in addition to new functions that you have to learn, since you know the PIX500's here are couple of links to compare to with ASAs.

Here are couple of links to refer to:

ASA models comparison

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Migrating from PIX 500 to ASA

http://www.cisco.com/en/US/products/ps6120/prod_brochure_list.html

Hope this helps

Jorge

Re: comparing ASA with PIX (pix 515E)

beheerggd — Mon, 07 May 2007 10:22:15 GMT

Jorge,

Thanks for your reply. The links you send me are very helpfull.

Stella

Re: comparing ASA with PIX (pix 515E)

srue — Mon, 07 May 2007 13:20:31 GMT

There are several changes in the ASA CLI that you should be aware (but not afraid) of. The interface configuration is more IOS like now. Also, vpn's are configured a little differently using the concept of groups. I know PIX 7.x will accept old style vpn commands and automagically convert them, but I don't know if the ASA has this logic. Also, the 7.x no longer supports conduits in either PIX or ASA.

The fixup commands have been deprecated in the 7.x OS, in favor of inspection maps (again, more IOS like syntax).

These examples scratch the surface of the differences, but are most likely the ones you will first encounter.

In short though, if you know PIX 6.x (or 7.x), the ASA should be easy to pickup.

Re: comparing ASA with PIX (pix 515E)

beheerggd — Tue, 08 May 2007 05:46:59 GMT

Thanks Steven!

Stella