cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
430
Views
5
Helpful
4
Replies

Suggested ASA Firewall

Dear All,

-

I have a company ( main office and branches), all computers in branches and main office access to a server so I need to do protection for this server what model of ASA firewall do you suggest?

Total computers in branchs and main office are about 70 PC, which access concerent about 50PC.

Regards.

2 Accepted Solutions

Accepted Solutions

Karsten Iwen
VIP Mentor VIP Mentor
VIP Mentor

The most important fact is missing in your question: How much bandwidth do you want to get through the firewall to the server.

The answer can range from ASA 5505 if 100 MBit/s is enough over ASA 5545-X for Gigabit up to the 5585-X for 10Gig.

And if you want HighAvailability you should at least go for the 5515-X.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

sean_evershed
Rising star
Rising star

Hi,

Depends on your budget.

Have a look at one of the smaller ASAs, 5505 or 5510. See below

https://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

If you have 3 or less VLANs choose the 5505. If you need more then choose the 5510.

Don't forget to rate all pots that are helpful.

Cheers

Sean

View solution in original post

4 Replies 4

Karsten Iwen
VIP Mentor VIP Mentor
VIP Mentor

The most important fact is missing in your question: How much bandwidth do you want to get through the firewall to the server.

The answer can range from ASA 5505 if 100 MBit/s is enough over ASA 5545-X for Gigabit up to the 5585-X for 10Gig.

And if you want HighAvailability you should at least go for the 5515-X.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

sean_evershed
Rising star
Rising star

Hi,

Depends on your budget.

Have a look at one of the smaller ASAs, 5505 or 5510. See below

https://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

If you have 3 or less VLANs choose the 5505. If you need more then choose the 5510.

Don't forget to rate all pots that are helpful.

Cheers

Sean

Dear all,

all branches aggregated over one E1 link so 100M is enough also 3 VLANS is enough, do you think ASA5505-BUN-K9 is good, because ASA5510-BUN-K9 so expensive.

Regards

Do you need a fully functional DMZ or more then 10 IPSec Peers? Then you need the 5505 SecPlus-Bundle. SecPlus is also needed if you want failover on the ASA. Keep in mind that failover is always stateless on the 5505. So if the active unit fails all connections have to reconnect.

Sent from Cisco Technical Support iPad App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers