ASA 5500

[rich_harris]

Hi

I'm looking at using a ASA 5500 to replace our aging pix. Other than normal firewall functionality, I want the unit to scan http content for malware, which I understand the Content Security Bundle provides.

I also need to at least throttle an exceptionally greedy application, but ideally dynamically throttle heavy users to an acceptable allocation.

Is this possible with this level of hardware, if not, any clues as to achieving this.

Many Thanks

Rich

[robertson.michael]

Hi Rich,

You are correct that malware scanning is done through the CSC module.

As for throttling your application, this depends on how exactly you want to throttle it but it should be possible. The ASA offers some functionality such as QoS, limiting the number of connections, etc.

Take a look through the configuration guide, which should give you some idea about the options you have for this:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/conf_gd.html

Hope that helps.

-Mike