ASA 5520 Replacement with Firepower...?

[ex-engineer]

Folks, IHAC who needs to replace his old ASA 5520. I'm pretty uninformed when it comes to the new Cisco Firepower appliances. Assuming a baseline config for the ASA 5520, which model of Firepower should I be looking at? Which is the natural next gen replacement for the ASA 5520?

Thank you! 

[Rob Ingram · Accepted solution]

@ex-engineer the Firepower 1000 series hardware will be comparable to an old ASA-5520 hardware. Datasheet:- https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

The Firepower hardware can run the traditional ASA software image or the newer FTD image, which has the NGFW features.

[ex-engineer]

Thanks, Rob, I will quote the 1140 running NGFW OS/feature set. Im in the CCO tool and it doesn't give me any choice for licensed feature sets in terms of IDS/IPS, threat detection/malware.... does that already come with the base 1140 config running NGFW?

[Rob Ingram]

@ex-engineer no the base license does not include the NGFW functionality like IPS, Anti-Malware, RAVPN etc.

https://secure.cisco.com/secure-firewall/docs/smart-licensing

[ex-engineer]

Thanks again. 

[Marvin Rhoads]

Note if you can wait a couple of months, the 1200C series firewalls will be orderable in August and start shipping in September-October.