Replacing Checkpoint with Cisco Firewalls

[carl_townshend]

Hi All

We are looking at alternatives to Checkpoint firewalls, namely the Cisco ASA which we already use a number of

The main benefit of the Checkpoints is centralized logging and reporting and management

Is this something that Cisco ASAs can do these days?

Cheers

[Marvin Rhoads]

Cisco Security Manager has been able to centralize ASA logging for quite some time. It's getting a bit old though and does not do anything with the ASA FirePOWER service module logs and events. It's not a strategic choice at this juncture.

If you're using the FirePOWER service modules, Cisco FirePOWER Management Center collects all of those event types ffom multiple managed devices. However it does not gather information from the base ASA.

The new FirePOWER Threat Defense (FTD) image type is the unifed code and it can be wholly managed by FirePOWER Management Center and reports can be gathered there.