Change of Network infrastructure

[islow1303]

Hello together,

We are currently making changes as we were slightly behind with our network. We have ordered a ASA 5585, Cisco SNS (Small Network Server)...and we use a nexus 3548 as our router which connects to several switches across the campus (all cisco baring in mind). Our Nexus 3548 is connected to a main router (where all other universities within the region are also connected to) which is managed by the Government.

Now the ASA 5585 has been bought replace our old ASA which we use for VPN purposes. Are we able to use the ASA 5585 for VPN purposes as well as a Firewall? ...

Furthermore we currently have an access list which is way too long because our old Network admin prefered working with static IP's and therefore managed all IP's statically through the Router using ACL's.

Would appreciate any type of advise.

Kind regards

[Philip D'Ath · Accepted solution]

Yes the ASA 5585 can do VPNs.  If you want to use SSL VPN then you will need appropriate licences.

Access control lists based on static IP addresses/subnets is quite common.  It is very reliable.

You can deploy the free CDA software, which track users logging into Active Directory, and then you can create per user access controls on the ASA.  I've found this to be problematic in the past, but that was quite some time ago.  It may have matured now.

http://www.cisco.com/c/en/us/td/docs/security/ibf/cda_10/Install_Config_guide/cda10/cda_oveviw.html