ASA 5520 | Web Filtering,content filtering replacing ISA 2006

[srsiddiqui2007]

Hi,

We are using ASA 5520 and wanted to replace two ISA 2006 instances with ASA 5520 + some web filtering, content filtering software / module along with 

What options can be explored for this purpose and any recommendations

[Karsten Iwen]

1. Best option: Replace the 5520 with an ASA with FirePOWER.
2. Second best option: Buy a CWS (Cloud Web Security) subscription and configure the CWS connector an on the ASA to send all HTTP/HTTPS to the cloud-proxy.
   More is not possible with this EOS-ASA for efficient web-filtering.

[srsiddiqui2007]

Second Option is not feasible since CWS only supports 300 with ASA 5520, i required atleast 500 users support.

First option can be availed but we want to use 5520 for another 2-3 years

[Karsten Iwen]

As mentioned, the ASA won't help you there. What about placing a security-proxy in a DMZ?