topic firewall replacement question? in Network Security https://community.cisco.com/t5/network-security/firewall-replacement-question/m-p/1616924#M577211 <P>currently working on replacing firewalls with ASA's. </P><P></P><P>Question is it better to replace the hub site in a group of l2l vpn tunnels or do the end sites and then replace the hub site?</P> Wed, 13 Mar 2019 01:01:28 GMT Keith Craycraft 2019-03-13T01:01:28Z firewall replacement question? https://community.cisco.com/t5/network-security/firewall-replacement-question/m-p/1616924#M577211 <P>currently working on replacing firewalls with ASA's. </P><P></P><P>Question is it better to replace the hub site in a group of l2l vpn tunnels or do the end sites and then replace the hub site?</P> Wed, 13 Mar 2019 01:01:28 GMT https://community.cisco.com/t5/network-security/firewall-replacement-question/m-p/1616924#M577211 Keith Craycraft 2019-03-13T01:01:28Z Re: firewall replacement question? https://community.cisco.com/t5/network-security/firewall-replacement-question/m-p/1616925#M577212 <HTML><HEAD></HEAD><BODY><P>I would recommend that you replace your remote site first before replacing the hub.</P><P></P><P>Worst case scenario, if you replace the remote first, at least if it is not working, then you just have to concentrate to troubleshoot one remote L2L connection. If you replace the hub, and if it's not working, then you would need to troubleshoot all L2L tunnels to the remote.</P><P></P><P>I wouldn't think there would be much issue anyway replacing the firewall as IPSec standard is pretty mature by now, and most vendors IPSec are compatible with each other.</P></BODY></HTML> Tue, 21 Dec 2010 12:36:11 GMT https://community.cisco.com/t5/network-security/firewall-replacement-question/m-p/1616925#M577212 Jennifer Halim 2010-12-21T12:36:11Z