DWSM and Appliance

[Ibrahim Jamil]

Hi

1)What is the difference between the FWSM and the Dedicated ASA Appliance in term of everything, Like Performance,Trop  ,cooling,space in rack

2)What is the difference between the IDSM-2 and Dedicated Appliance in term of everything, Like Performance,Throuput,cooling,space in rack

where and when we should use either module or Appliance?

[Shrikant Sundaresh]

Hi Ibrahim,

The best reference for checking out differences between these appliances, would be the Cisco published Product Data Sheets.

I am providing the links for FWSM and ASA 5500 series. You can compare the various parameters and judge which would suit you better accordingly.

FWSM(Table 1): http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps4452/product_data_sheet0900aecd803e69c3.html

ASA (Table 8,9): http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Now to the question of whether you should use an FWSM or an ASA, it depends on your network topology.

The FWSM fits into a Catalist 6500 switch or a 7600 series router. If you already have one of these devices in your network, then it makes sense going for an FWSM. You can put it in transparent mode, and it would fit right into your network. If you dont have a 6500 or 7600 appliance, and don't see the need for one, then you can go for one of the 5500 series ASA based on the amount of traffic expected to go through the device.

Also, I think VPN tunnels cannot terminate on the FWSM (except for management purpose.) However, the ASA can serve as a VPN headend.

Hope this helps.

-Shrikant

P.S.: Please mark the question as answered if it has been resolved. Do rate helpful posts. Thanks.

[Ibrahim Jamil]

Hi

what about the below question

2)What is the difference between the IDSM-2 and Dedicated Appliance in term of everything, Like Performance,Throuput,cooling,space in rack

[Shrikant Sundaresh]

Hi Ibrahim,

I haven't really worked on IDSM or IPS, but here are the product data sheet links for both.

Refer to table 1 in both links:

IDSM: http://www.cisco.com/en/US/products/hw/modules/ps2706/products_data_sheet09186a00801e55dd.html

IPS 4200 series: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps9157/product_data_sheet09186a008014873c_ps4077_Products_Data_Sheet.html

Once again i think the same reasoning would apply. If you have a 7600/6500 with a free slot, IDSM is an option. IF you don't have those devices, and don't see the need for one, then a stand alone IPS, as per expected network traffic.

Hope this helps.

-Shrikant

P.S.: Please mark this question as answered, if it has been resolved. Do rate helpful posts. Thanks.