I have been told that there are no immediate plans to replace the PIX with
the ASA, as many organizations do not want an all-in-one firewall. The ASA
can be considered a PIX replacement with new functionality and better
performance. I also believe you can have an ASA and PIX function in a
failover.
-----Original Message-----
From: Greg Owens [mailto:gowens@covad.net]
Sent: Wednesday, February 15, 2006 2:53 PM
To: 'dabance'; firewalls@securityfocus.com
Subject: RE: PIX Vs ASA
The below is a comparison of the PIX and the ASA. The ASA can handle up
to 2500 SSL VPN connection and the VPN Concentrator can only handle 500
clientless.
PIX
PERFORMANCE SUMMARY
* Cleartext throughput: Up to 330 Mbps
* Concurrent connections: 280,000
* 168-bit 3DES IPSec VPN throughput: Up to 145 Mbps with VAC+ or 72 Mbps
with VAC
* 128-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+
* 256-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+
* Simultaneous VPN tunnels: 2000
ASA
Table 3. Cisco ASA 5540 Adaptive Security Appliance Platform
Capabilities and Capacities
Feature
Description
Firewall Throughput
Up to 650 Mbps
Concurrent Threat Mitigation Throughput (Firewall + IPS Services)
Up to 450 Mbps with AIP-SSM-20
VPN Throughput
Up to 325 Mbps
Concurrent Sessions
400,000
IPSec VPN Peers
5000
SSL VPN Peer License Levels*
10, 25, 50, 100, 250, 500, 750, 1000, and 2500
Security Contexts
Up to 50*
Interfaces
4 Gigabit Ethernet ports and 1 Fast Ethernet port
Virtual Interfaces (VLANs)
200
Scalability
VPN clustering and load balancing
High Availability
Active/Active, Active/Standby
________________________________
From: dabance [mailto:dabance@gmail.com]
Sent: Wednesday, February 15, 2006 3:20 AM
To: firewalls@securityfocus.com
Subject: PIX Vs ASA
Hi,
Recently i have seen the word ASA on cisco site and even CSPFA is
replaced by Securing Networks with PIX and ASA (SNPA). I believe that
cisco has introduced a new security platorm called ASA. Can anyone
please explain me what it is ??....whether this ASA 5500 series is going
to replace the old PIX Firewalls in future???...
Kindly throw some lights on the above mentioned....
regards,
Joesph
The information contained in this E-mail message is intended for the
personal and confidential use of the designated recipient(s) named above.
This message and all communication contained herein is privileged and
confidential. If the reader of this message is not the intended recipient or
an agent responsible for delivering it to the intended recipient, you are
hereby notified that you have received this E-mail message in error, and
that any review, dissemination, distribution or copying of this message is
strictly prohibited. If you have received this message in error, please
notify MTD PRODUCTS INC immediately by calling (330) 225-2600.
