topic Re: We are replacing Cisco ASA's with an SD-Wan solution in Network Security

We are replacing Cisco ASA's with an SD-Wan solution

barryrosenhouse — Wed, 10 Nov 2021 13:53:07 GMT

Most likely from AT&T - My question is I was tasked with giving my director 2 solutions, either Meraki SD-Wan or Fortinet SD-Wan. Removing the 2 Cisco ASA's (5505 and 5515) at our Headquarters. Does anyone know what devices need to replace those 55XX's or has anyone done this type of cutover before that can help me here?

Re: We are replacing Cisco ASA's with an SD-Wan solution

balaji.bandi — Wed, 10 Nov 2021 14:29:32 GMT

ASA replacement with Firepower is good choice.

if you like to choose between Meraki / Fortinet - if you are cisco housem then going with Meraki has advantage.

Re: We are replacing Cisco ASA's with an SD-Wan solution

barryrosenhouse — Wed, 10 Nov 2021 14:33:15 GMT

Thx Balaji, We are mostly a Cisco house, Is the advantage because of compatibility or price do you know?

Re: We are replacing Cisco ASA's with an SD-Wan solution

balaji.bandi — Wed, 10 Nov 2021 14:42:58 GMT

Is the advantage because of compatibility or price do you know?

More elaborate this will help us to understand,

Re: We are replacing Cisco ASA's with an SD-Wan solution

barryrosenhouse — Wed, 10 Nov 2021 15:28:55 GMT

I was tasked with giving my director 2 solutions, either Meraki SD-Wan or Fortinet SD-Wan

Re: We are replacing Cisco ASA's with an SD-Wan solution

balaji.bandi — Wed, 10 Nov 2021 16:05:27 GMT

Meraki SD-Wan - is reasonable. not sure Fotinet - (worked on FW , not SD-WAN product ?)

Re: We are replacing Cisco ASA's with an SD-Wan solution

paul driver — Thu, 11 Nov 2021 09:09:06 GMT

Hello
The meraki MX is a UTM a (security, network, application control), its centrally managed, single gui based dashboard for multiple devices,(UTMs, Switches,APs,,Cameras, etc..) so easy to use, it also supports live troubleshooting(pcaps analytics etc.) from within, A central place for everything.

The SD-WAN function is built into the MX no tricky overlay to work out, it uses your internet BW via ipsec vpns so no expensive WAN MPLS,( lower wan costs but massively increase bandwidth)

The Auto vpn function is very easy, no acls crytpo maps, just two/three clicks and you have site to site connectivity (active/active, active/passive) for load balancing.

It uses dynamic path selection (likes Cisco’s optimised edge routing) so the mx choose the best path based on the performance condition of your existing egress paths

As for the security, its geo based(so pick what sites you want to apply that security) and includes IPS(snort), Content filtering, AMP via cisco secure formally known as threat grid and best of all the security updates are pushed out as SaaS so you dont need to worry about missing any meraki device not being updated

Good kit all round.

Re: We are replacing Cisco ASA's with an SD-Wan solution

barryrosenhouse — Thu, 11 Nov 2021 21:58:37 GMT

Thanks much for your reply. I will def look into this.

Barry

Re: We are replacing Cisco ASA's with an SD-Wan solution

barryrosenhouse — Thu, 11 Nov 2021 21:59:15 GMT

Paul I appreciate the reply - Very good info. i was lost.

Barry