cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
734
Views
0
Helpful
11
Replies

Which ASA5505?

Samir Darji
Contributor
Contributor

So after working with smb-level products for a couple of decades, I've gotten to a point where I can finally justify enterprise class equipment.

Now, the problem is which one?  In the ASA 5505 data sheet there's at least 9 different part numbers with slightly different specs.   How do you make sure you've got exactly what you need since there aren't individual spec sheets?

Also, how does support and warranties work on enterprise equipment?  Do I have to buy a license/subscription each year?  Or will it still work after the current/included/trial subscription runs out.

Thank you in advance for any replies.           

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com      

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com
11 Replies 11

nickhesson
Beginner
Beginner

Hello,

I believe the reason why you have no answer to this thread, is because you have mistaking a model number for the series number.  ASA hardware series is 5500.  The 5505 is the low-end SMB model of the 5500 series.   

5505 is not intended to be a enterprise level firewall. But more of a SOHO.  The 5505 only has two options, a higher license option (Security Plus) and an IPS module (SSC-AIP-5).   

The main difference between all models is performance.  Connection throughputs and the # available physical ports.  Take a look at this link:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Thank you for the reply.  I know that the 5505 is part of the 5500 series.  I knew Security Plus was an option, but not the IPS module.  I really don't need either of those.

The problem is the part number for a plain-jane 5505.  If you look at the datasheet, there's actually different part numbers for models that support DES or 3DES/AES as well as other options.  And then every vendor I've looked at has a wide variety of pricing based on the part number, so purchasing is quite confusing.  And then there's the whole idea of support and warranties.  Enterprise products seems to sell this separately, so understanding what is included/not is a point of confusion in itself.

It's as clear as mud for me right now.  I still don't know what part number would actually do what I want and no more.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

I appreciate your confusion about the numerous choices when you look into the 5505, do you want the firewall edition, or the vpn edition, or the IPS edition, or the Content Security edition, or the UC Security edition? The choices are many and the differences are not clear. The good news is that the hardware is the same in all the choices and the software is pretty much the same. The main differences are in how it optimizes for various purposes and in the licensing that is part of some of them (especially the IPS and Content Security bundles).

In general the ASA (and other Enterprise class equipment) will continue to run after your initial support contract/warranty expires. Without the support contract you lose the ability to ask for help if you run into a problem with the hardware or the software and you lose the ability to upgrade the software to a newer version. And with IPS you lose the ability to get updated signatures. But basically the box will still run and do what it has been doing.

HTH

Rick

HTH

Rick

Yep, you nailed it on the head, and I didn't even know there were that many.

My main purpose would be for dual-wan and vpn, or just vpn if this is only single wan (I forgot).  What's the part number you recommend?  Then I can go and research it.

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

Based on what you have posted I believe that the VPN edition is the best fit for you. I do not have the part number where I can access it easily. But you should not have too much difficulty in identifying it as you look for VPN edition.

Good luck to you in implementing this.

HTH

Rick

HTH

Rick