Need Firepower replacement for ASA 5510

[baskervi]

I'm a bit frustrated. I spent probably 30 minutes looking for a replacement on Google, and I saw lots of references to the ASA-5512-X and 5515-X, but end of life isn't too far out. I then chatted with Cisco for nearly 25 minutes and was getting transferred to the 4th person last Friday but was heading out of town and dropped the call. It's not rocket science.

We need full 1Gbps NICs and the NGFW features. We will be terminating 16 site-to-site VPN tunnels. Does the 2110 somewhat map over to the 5510? Does another firewall fit the bill better? Thanks

[Marius Gunnerud]

If you are looking for a 1 to 1 match then I think the closest is FTD 1140 (based on throughput and VPN peers, etc.).  But if you have the budget then the 2110 is a good firewall to grow into.

Datasheets

FTD1000

https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

FTD2100

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

[Marvin Rhoads]

For a single appliance setup I'd recommend the Firepower 1120 running FTD with the basic Threat license.

If you're doing more than 1 or 2 of them (or would just like centralized cloud-based management) the I would also go with the Cisco Defense Orchestrator (CDO) management option.