From: Alexei Monastyrnyi (alexeim73@gmail.com)
Date: Sat Feb 07 2009 - 20:22:00 ARST
Quite a debate over your OT, huh? :-)
I have three ASA 5505 in small branches and a dozen o 5510 ones in
medium branches plus redundant pair of 5510 in HQ. Well, I joined the
company when there were all PIX'es 506 with PIX 515 one in HQ. Compared
to them ASA units are capable but compared to possible future
requirements (like redundant IPSec tunnels etc) they are quite limited.
You better look out for version 7.x vs 8.0 since there are enhancements
in 8.0 and obviously for goals in general. For example I have hard times
making VPN tunnels on ASA in branches to switch to disaster recovery
site once the main HQ site is down. With DMVPN it would work like a charm.
With firewall features enabled by default ASA is good but with advanced
VPN tunneling and scalability for management it might be an issue.
Someone else mentioned before in GS that scalability of management for
ASA is a joke and I am quite agree with that.
Just my .02.
A.
Christopher Copley wrote:
> Group,
>
> My company is moving away from Checkpoints to ASA's. I have got my
> management to buy me 2 ASA 5505's for my lab to learn. My question is, how
> does the 5505's compare to the 5510 and above? Is there much that I will
> not be able to test or practice with the 5505's, or major differences?
>
>
> Chris
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:10 ARST