To migrate from PIX 515e to ASA 5500-X series

[Wei Kwong Ong]

Hi, here is a scenario whereby the old firewall PIX515e need to be replaced to ASA firewall.

from here

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps2030/end_of_life_notice_for_the_Cisco_PIX_515E_Security_Appliance.html

the replacement model for PIX515e is ASA5510-K8.

well, after that, I found out that ASA5510-K8 is just EOS,

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/eol_C51-727283.html

and the replacement model for ASA5510-K8 is ASA5512-SSD120-K8.

My question is, if I purchace ASA5512-SSD120-K8 to replace the existing PIX515e, is it possible to migrate from PIX515e to ASA5512-SSD120-K8?  or ASA5512-K8/K9? The SSD is it necessary?

Thanks.

[Marvin Rhoads]

Yes, the 5512 is a good replacement for the Pix. You cannot load the Pix configuration file directly on the 5512 though. You are better off recreating the configuration from scratch manually on the 5512 and using the opportunity to vaildate all your rules.

The SSD models are only necessary if you want to use the Next Generation Firewall features like Web Security Essentials (WSE), Application Visibility and Control (AVC) or Next Generation IPS. Those all require a separate subscription license in addition to the Solid State Drive (SSD) hardware option.