Replacing a Fortigate 600C with a Cisco ASA 5500-X series

[eurixjaneth1]

A customer needs to replace a firewall fortigate 600C, and the company wants to recomend a Cisco Solution, what would be the best option?. I don't have any detail about the current's  perimeter security device configuration.

[Karsten Iwen]

The 600C is a quite powerful device. An ASA 5585-X (SSP-20 or SSP40) with FirePOWER could be comparable to it. But if it's a pure perimeter device, it could be oversized and a smaller one could be enough.

[Craddockc]

I agree with Karsten. From an ASA perspective, Cisco doesnt have anything but the 5585 that would be comparable to the 600C or up and that would be overkill. If replacing a Fortinet box you would really have no choice but to go to a Cisco Firepower 4100 or up to get comparable performance. Fortinet is a leader in security appliance ASIC technologies so you will see that even their lower end boxes like the 300C blow away the upper end  X series ASA's by alot! With the exception of the 5585 of course. However, since Cisco acquired Sourcefire, the Firepower boxes are now an option. 

Hope this helps.