Solved: Cisco ASA vs.FWSM

pratheesh.venu · ‎03-04-2012

I am looking to get some design level recommendation for firewall selection. I have been reading lots of postive consideration for suggesting FWSM on 6500 or 7600, however I haven`t seen may of the customers using this solution. And I am sure Nexus 7k/5k wouldn`t support FWSM modules.

Appreciate your input on making selction between FWSM vs ASA appliances for various security scenarios.

Marvin Rhoads · ‎03-04-2012

The FWSM is being replaced by the ASA Services Module (ASA-SM). There is also rumoured to be a version of ASA module for Nexus coming out soon. Oh and there is also the Nexus ASA 1000V to consider in the highly virtual space.

Device selection depends in large part of your site architecture and performance requirements. One cannot give a blanket recommendation without taking those into consideration.

Some people argue against service modules as a general principle - see, for example, this blog post.

View solution in original post

Marvin Rhoads · ‎03-04-2012

The FWSM is being replaced by the ASA Services Module (ASA-SM). There is also rumoured to be a version of ASA module for Nexus coming out soon. Oh and there is also the Nexus ASA 1000V to consider in the highly virtual space.

Device selection depends in large part of your site architecture and performance requirements. One cannot give a blanket recommendation without taking those into consideration.

Some people argue against service modules as a general principle - see, for example, this blog post.

pratheesh.venu · ‎03-04-2012

Thank you. This is what I was looking for.

Regards

Pratheesh