02-18-2015 10:16 AM - edited 03-05-2019 12:50 AM
Hi
Where should i place an ASA firewall in my network? Should i connect ASA outside interface directly to the ISP?
Can ASA 5585 perform BGP?
02-18-2015 11:09 AM
"Where should i place an ASA firewall in my network? Should i connect ASA outside interface directly to the ISP?"
Yes outside interface, assume that is where your primary internet circuit is terminated.
You don't necessarily need to peer over BGP just for sake of getting internet connection from your ISP.
Yes, ASA can perfrom BGP.
Hope this answers your question.
Thanks
02-18-2015 03:41 PM
hi,
if SP has ethernet hand off, then you could use the ASA. but router is more flexible in terms of WAN port/module and BGP config/routing. but it still depends on your design. we have a mix of both but i personally prefer (easy for me) having an internet edge router and an ASA behind it.
yes, BGP is supported on newer 9.x code.
02-19-2015 04:38 AM
Do you set the ASA in transparent mode then, if its behind the edge router?
Do the ASA interfaces then have private ip address or assigned public?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide