topic Re: ASA 5510 in Network Security

ASA 5510

ngonulsen — Mon, 11 Mar 2019 14:24:44 GMT

Hi,

I'm thinking of purchasing an ASA 5510 but I want make sure it can do what I need it to do before I purchase it.

Our head office has multiple global ip's and we are bringing our website in house (cost restraints) I would like to have the external ip of the website different than the ip that everyone internal will be using to access the internet (i.e. 5510 external ip 205.150.193.66 and internal 10.0.0.1, put the webserver in a dmz with external ip 205.150.193.67 and internal 192.168.0.2). Is this possible to accomplish with the 5510?

This device will also be connecting our remote offices via VPN with a 5505, pix 506E and sonicwall TZ 180.

The model I'm thinking of purchasing is ASA5510-AIP10-K9, do I need any other modules? Will I have any issues with the Advanced Inspection and Prevention Security module?

Thank you in advance.

Re: ASA 5510

francisco_1 — Thu, 11 Dec 2008 16:38:22 GMT

the model ASA5510-AIP10-K9 is the Cisco ASA 5510 Adaptive Security Appliance with SSM-AIP-10 (chassis, software, 50 VPN peers, 4 Fast Ethernet interfaces, Triple Data Encryption Standard/Advanced Encryption Standard [3DES/AES])

you taking cost in to consideration so yeah the ASA5510 will do what you want. it comes with 5-10/100, one for your inside network, the rest you can use for DMZ and public network. you can have 250 maxium site-to-site to your other firewalls with 3DES/AES VPN throughput up to 170Mpbs.

Francisco

Re: ASA 5510

ngonulsen — Thu, 11 Dec 2008 16:52:41 GMT

Thanks Francisco.

I have one other question, from your statement I will not need to purchase 25 licenses for my remote users?

Thanks

Re: ASA 5510

francisco_1 — Thu, 11 Dec 2008 17:05:01 GMT

dont think so. ASA5510-SEC-BUN-K9 will do just fine for you.

Francisco.

Re: ASA 5510

ngonulsen — Thu, 11 Dec 2008 17:07:17 GMT

Thanks for your help.

Re: ASA 5510

francisco_1 — Thu, 11 Dec 2008 17:09:59 GMT

if you want to do SSL/IPsec VPN, then you need the correct license depending on the number of IPSEC/SSL VPN peers.

see http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Francisco

Re: ASA 5510

ngonulsen — Thu, 11 Dec 2008 19:36:24 GMT

Yes, I know that it supports 2 sessions but I would need the licences for more.

Thanks again