ASA5508x replacement

[bikebright]

I have two ASA5508x in a HA pair. When I bought them, we just had 100meg internet. Now they are four years old and I have two separate internet lines, 1gig and 100meg. I am not understanding the difference between the 1000 series and the 2100 series. Would a 2110 be OK or would a 1140 be better. We have an office of about 250 people.

Thanks,

[balaji.bandi]

If you have a budget i will go with the 2100 model, if your budget is limited then  I go with the 1150 model on top-end at least next year's investment protection.

[bikebright]

I think the 1150 is more expensive than the 2110. I was hoping someone could run some numbers in the Firewall sizing tool that I can not access.

[Marvin Rhoads]

Here you go - 1 Gbps, running FTD with IPS active:

The 1140 can actually outperform the 2110 in some use cases - i.e. if it's primarily an SSL VPN gateway. That's because the Intel CPU in it has QuickAssist crypto acceleration built-in.

For more details see Cisco Live presentation BRKSEC-3035 from Barcelona 2020.

[bikebright]

Thanks, that is just what I was looking for.