Cisco ASA VRF support

Roberto Rafael Lopez Marquez — Tue, 12 Mar 2019 05:00:19 GMT

Hello,

I have a customer who wish to replace an old 7200 router that supports the following services:

- 5000 static nat with support to 15000 nat translations in the near future.

- Around 125 Mbps of bandwidth throughput

- 200 VRFs

This customer wants an security focused device and not use a router anymore because he wants to apply specific security policies for traffic entering and leaving his network plus content filtering. Also wants a scheme of HA and wants to keep the VRFs.

Now I thought about a couple of firewall ASA 5585-X in failover, but I have some questions:

1.- Does the ASA support VRFs? I have been looking around on Internet and it seems that it does not, only virtual context.

2.- What could be a potential Cisco device I could offer that complies with the requirements? maybe an ASR 1000, but again this would be replacing a router with other router which is not desired in the first place and also I will lose the HA feature.

Any advice would be appreciated.

Best regards,

Rafael.

topic Cisco ASA VRF support in Network Security

Cisco ASA VRF support