Comparison of ASA-CX and normal ASA

[Jonn cos]

Hi all,

Is it possible to get some comparison table or document that highlights main advantage of using CX over normal ASAs ?

[halim.iguer]

ASA-CX is anew generation firewall, it inspect  packets at application layer rather than IP adress and port number.

[Andrew Phirsov]

There no advantages/disadvantages one over  another. CX is not a standalone ASA, but a module (hardware or software), wich complements normal ASA with some extended function, as Application Visibiltiy And conrol and web filtering. Technically, CX is module, wich allows the ASA perform functions, usually done by cisco ironport VSA.

Traffic, after being filterd by "normal" asa is redirected to CX for further inspection and policies application.

You can see session on ciscolive365.com regarding CX or just google what it is. And, as I said, you souldn't compare them.

[halim.iguer]

Hello Andrew,

Is this an ADD module for advanced web filtring ?

Regards

[Andrew Phirsov]

Techically, yes. You can read this for basic understanding:

http://www.cisco.com/en/US/docs/security/asa/quick_start/cx/cx_qsg.html