Router with integrated vpn and firewall features/services

[adeebtaqui]

Greetings,

I would like to know which cisco router series isr or asr is more suitable for use at branch as router with integrated vpn and firewall

[Rob Ingram]

Hi,

If the router is for a branch site then you'll probably be fine with an ISR router, either 1000 or 4000 series. They both support Zone-Based Firewall and IPSec VPN (crypto map, DMVPN, FlexVPN, GETVPN etc).

Datasheets for 4000 and 1000.

HTH

[balaji.bandi]

Depends on size of the Branch device and network .

ISR 4000 is good, we have deployed many for medium sized branch users. make sure you buy right license for througput

[adeebtaqui]

When is ASR 1001-10G preferred

Is it mainly for core deployment at customer edge to interface with service provider ?

Regarding throughput, what is the best way to analyse how much throughput shall be appropriate for our deployment.

Is there any cisco doc explaing this.

Kindly share

[balaji.bandi]

here is the good reference document : ( also you need to consider Cost model)

https://www.cisco.com/c/dam/global/hr_hr/events/2016/cisco-connect/pdf/Cisco_IOS_XE_Routers_-_ASR_1000_and_ISR_4000_-_The_Evolution_of_Converged_Network_Edge_Architectures_-_Jaromir_Pila_Cisco.pdf

Model can be decide once you have future visibility, what is wan bandwidth requrirement for next 3-5years. (beauty of this is, you can start with small bandwidth with Software license you can upgrade later higher throughput with out any downtime. or reboot of the device).