RE: Cisco PIX vs Cisco ASA

I agree with you completely that the PIX are being faded out.  I would
essentially use the ASA as a PIX replacement and IDS sensor of traffic
hitting the internet but not replace the VPN concentrator as the ASA does
not support PPTP and we still have a number of users that use the MS VPN
client.


Jonathan

-----Original Message-----
From: James Williams [mailto:jwilliams@mail.wtamu.edu] 
Sent: Wednesday, October 12, 2005 8:08 AM
To: Jonathan Gauntt; firewalls@securityfocus.com
Subject: RE: Cisco PIX vs Cisco ASA

Here is something to think about:

> From what I understand the Cisco ASA is going to replace the PIX and the
VPN Concentrators in the near future. If that's the case you might want
to go with the ASA as the PIX and VPN Concentrator could become EOL
soon.

James Williams, GISF
Network Systems Technician

-----Original Message-----
From: Jonathan Gauntt [mailto:jon0966@yahoo.com] 
Sent: Friday, October 07, 2005 1:58 PM
To: firewalls@securityfocus.com
Subject: Cisco PIX vs Cisco ASA

Hi,

 

I have four Cisco PIX 525's at our office.  Multiple DS3's run to our
first PIX 525 with another in standby and a similar configuration for
the other pair of PIX 525's.

 

I also have a pair of VPN3030 concentrator's that handle our LAN to LAN
connections and inbound VPN connectivity.

 

I am considering replacing our PIX / VPN pairs with four Cisco ASA
5540's or leave our VPN 3030's and purchase four PIX 535's.

 

Does anyone have any real world experience with the ASA line and what
are your thoughts on them?

 

Thanks,

 

 

Jonathan