topic Re: Upgrading / Replacing the ASA 5545X in Network Security

Upgrading / Replacing the ASA 5545X

TW80CJ5 — Wed, 17 Mar 2021 19:24:50 GMT

Hello Everyone,

We have been using Cisco ASA 5545X in our enterprise remote office locations. We use Cisco FMC 4600 to manage the SFR's on the ASA's.

We found out that they are end of sale and we need to order some new firewalls. Cisco is our preferred...which cisco firewall product is designed to replace the ASA 5545X and will work with our FMC?

Feedback is welcomed!

Re: Upgrading / Replacing the ASA 5545X

Rob Ingram — Wed, 17 Mar 2021 20:02:00 GMT

Hi @TW80CJ5

It depends, what are you using the ASA 5545-x for? Firewall, VPN, IPS etc?

The FPR-2100 (2110 or 2120) series has similar performance, throughput, connections. If you don't have a lot of VPN peers, you might be ok with the 2110. Refer to the datasheet for full specs.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

Re: Upgrading / Replacing the ASA 5545X

TW80CJ5 — Wed, 17 Mar 2021 20:20:38 GMT

Hey Rob...

We are currently using the ASA for all three, with an FMC 4600 at a region managing the SFR's at the remote offices. We are currently implementing routers so our ASA's will no longer handle our L2L VPN's.

So is this appliance compatible with the FMC similar to how the ASA's SFR was managed by it???

Thanks for all of the help.

Re: Upgrading / Replacing the ASA 5545X

Rob Ingram — Wed, 17 Mar 2021 20:24:46 GMT

Hi @TW80CJ5

Yes the FMC can manage the 2100 series hardware as long as they are running FTD software. Version 6.6.1 is the current cisco recommended version.

Re: Upgrading / Replacing the ASA 5545X

Sheraz.Salim — Wed, 17 Mar 2021 20:39:44 GMT

we recently replaced our 4x5545-X series firewall into 4x2140 FTD. we get a massive discount on the hardware appliance and also on the software L7 Firepower. make sure you reach out to cisco or if dealing with cisco partner get a good deal as cisco offer good deals with FTD.

Re: Upgrading / Replacing the ASA 5545X

Sheraz.Salim — Wed, 17 Mar 2021 20:42:34 GMT

FTD managed my FMC you can implemetn site to site vpn with PSK and with Cert based.