Simple network architecture for redundant switches and firewalls?

[jimmyc_2]

We'll be building a small remote site that will use two Windows 2008 servers.  We would like redundancy in firewalls, IPS's and switches.   Is it better to buy stand-alone ASA 5510s (with embedded IPS's) and 2960s, or is it a better option to buy a  Cat 6000 with FW modules.  We'll have several internet IP addresses available.  I don't know much about Nexus or latest HW options, so perhaps there's options I don't know about.  Thanks

[Karsten Iwen · Accepted solution]

The Cat6500 with ASA-SM is far more expensive then standallone devices. If you think about the 5510 and the throughput is enough, then I would use the following equipment:

2* ASA 5515-X-IPS as Active/Standby

2* Cat 3750-X as a stack with redundant power-supplies.

That will give you a maximum of redundancy for an affordable price.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[jimmyc_2]

Thanks.