09-27-2006
04:49 AM
- last edited on
02-21-2020
11:16 PM
by
cc_security_adm
From the ASA Data sheets it is not really clear if you can buy a "standard" ASA5510-BUN-K9 do stateful firewalling and VPN termination and later add a CSC-10 for further AV functionality.
They only reference the different editions like Anti-X, VPN or Firewall.
Can anyone clear this up.
I want to offer a customer a 5510 for firewall and VPN termination. And if he wants later upgrade it to do also AV inspection of the traffic.
The other way around if i order the Anti-X edition i can still do VPN termination or am i really forced to get an ASA for each functionality?
I am aware that i can't use IPS and CSC the same time but the approach as described above should be okay. Again the Data sheets are not really accurate on this issue.
Thanks for reading
Roble
Solved! Go to Solution.
10-05-2006 01:03 AM
Hi,
The firewall and vpn termination is all in the software - so you'll have this no matter which ASA you purchase. (If you're talking about SSL vpn's then it's still in the software although you'll need to buy the appropriate license.)
So your idea of a 5510 initially for fireall/vpn and later on providing the CSC module for Anti-X is spot on.
HTH
Andrew.
10-03-2006 07:51 AM
10-05-2006 01:06 AM
Thanks for the reply and the link but what i was asking was following.
The different Editions seem only to be a marketing issue saying that whatever problem you want to solve you can use the ASA in different ways for it.
So i wanted to make sure that if i order the more or less standard "ASA5510-K9-BUN" and use it for firewalling and VPN i could later decide to get an CSC Module and Upgrade it to do Anti-X functionality as well.
I don't want to end up with having a standard ASA 5510 and being told that i should have bought the Anti-X Edition in the first place or worse get an ASA for Anti-X and get an ASA for VPN and firewalling.
Thanks for reading
10-05-2006 01:03 AM
Hi,
The firewall and vpn termination is all in the software - so you'll have this no matter which ASA you purchase. (If you're talking about SSL vpn's then it's still in the software although you'll need to buy the appropriate license.)
So your idea of a 5510 initially for fireall/vpn and later on providing the CSC module for Anti-X is spot on.
HTH
Andrew.
10-05-2006 01:08 AM
That answer was exact what i was looking for.
Thanks Andrew.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide