Where should i place ASA?

[nielsen110]

Hi

Where should i place an ASA firewall in my network? Should i connect ASA outside interface directly to the ISP?

Can ASA 5585 perform BGP?

[rizwanr74]

"Where should i place an ASA firewall in my network? Should i connect ASA outside interface directly to the ISP?"

Yes outside interface, assume that is where your primary internet circuit is terminated.

You don't necessarily need to peer over BGP just for sake of getting internet connection from your ISP.

Yes, ASA can perfrom BGP.

Hope this answers your question.

Thanks

[johnlloyd_13]

hi,

if SP has ethernet hand off, then you could use the ASA. but router is more flexible in terms of WAN port/module and BGP config/routing. but it still depends on your design. we have a mix of both but i personally prefer (easy for me) having an internet edge router and an ASA behind it.

yes, BGP is supported on newer 9.x code.

[nielsen110]

Do you set the ASA in transparent mode then, if its behind the edge router?

Do the ASA interfaces then have  private ip address or assigned public?