topic Re: ASA5508x replacement in Network Security

ASA5508x replacement

bikebright — Tue, 16 Jun 2020 21:49:12 GMT

I have two ASA5508x in a HA pair. When I bought them, we just had 100meg internet. Now they are four years old and I have two separate internet lines, 1gig and 100meg. I am not understanding the difference between the 1000 series and the 2100 series. Would a 2110 be OK or would a 1140 be better. We have an office of about 250 people.

Thanks,

Re: ASA5508x replacement

balaji.bandi — Tue, 16 Jun 2020 21:56:00 GMT

If you have a budget i will go with the 2100 model, if your budget is limited then I go with the 1150 model on top-end at least next year's investment protection.

Re: ASA5508x replacement

bikebright — Tue, 16 Jun 2020 22:10:24 GMT

I think the 1150 is more expensive than the 2110. I was hoping someone could run some numbers in the Firewall sizing tool that I can not access.

Re: ASA5508x replacement

Marvin Rhoads — Wed, 17 Jun 2020 03:11:30 GMT

Here you go - 1 Gbps, running FTD with IPS active:

The 1140 can actually outperform the 2110 in some use cases - i.e. if it's primarily an SSL VPN gateway. That's because the Intel CPU in it has QuickAssist crypto acceleration built-in.

For more details see Cisco Live presentation BRKSEC-3035 from Barcelona 2020.

Re: ASA5508x replacement

bikebright — Wed, 17 Jun 2020 15:29:09 GMT

Thanks, that is just what I was looking for.