Upgrading / Replacing the ASA 5545X

[TW80CJ5]

Hello Everyone,

We have been using Cisco ASA 5545X in our enterprise remote office locations. We use Cisco FMC 4600 to manage the SFR's on the ASA's.

We found out that they are end of sale and we need to order some new firewalls. Cisco is our preferred...which cisco firewall product is designed to replace the ASA 5545X and will work with our FMC?

Feedback is welcomed!

[Rob Ingram]

Hi @TW80CJ5 

It depends, what are you using the ASA 5545-x for? Firewall, VPN, IPS etc?

The FPR-2100 (2110 or 2120) series has similar performance, throughput, connections. If you don't have a lot of VPN peers, you might be ok with the 2110. Refer to the datasheet for full specs.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

[TW80CJ5]

Hey Rob...

We are currently using the ASA for all three, with an FMC 4600 at a region managing the SFR's at the remote offices. We are currently implementing routers so our ASA's will no longer handle our L2L VPN's.

So is this appliance compatible with the FMC similar to how the ASA's SFR was managed by it???

Thanks for all of the help.

[Rob Ingram · Accepted solution]

Hi @TW80CJ5 

Yes the FMC can manage the 2100 series hardware as long as they are running FTD software. Version 6.6.1 is the current cisco recommended version.

[Sheraz.Salim]

FTD managed my FMC you can implemetn site to site vpn with PSK and with Cert based.

[Sheraz.Salim · Accepted solution]

we recently replaced our 4x5545-X series firewall into 4x2140 FTD. we get a massive discount on the hardware appliance and also on the software L7 Firepower. make sure you reach out to cisco or if dealing with cisco partner get a good deal as cisco offer good deals with FTD.