Wednesday, April 25, 2007
Love the new Cisco ASA!
I just installed my first Cisco ASA Firewall, and me likey! It is so cool. I got the Security Plus Edition of the ASA 5505. It has support for up to 20 VLAN’s, DMZ, etc. It has 8 ports, 2 of which are Power over Ethernet ports to power other devices. The command line interface is a little different from the PIX, but very similar. The new PIX OS is actually more like the IOS deployed on Cisco Routers. This is an effort to make the Cisco platforms more uniform. The ASA also features SSL VPN which uses active x to install a virtual adapter on the client PC. This is more convenient than the Cisco VPN client. The biggest enhancement with the ASA is the application layer firewall. The ASA allows for additional security modules that perform Anti-Virus, Anti-Spyware, and Intrusion Detection. The Anti-X module utilizes Trend Micro Virus Definitions for appliances. The ASA also allows for a backup ISP to be connected on a second WAN port. This is not the same as Failover, but instead offers a cost effective way to implement Internet connection redundancy without purchasing 2 firewalls. Performance is outstanding; the firewall operates very efficiently, and is very stable. Throughput on the ASA 5505 has been 2x the replaced PIX 501. Overall, I have been extremely pleased with the Cisco ASA. I would recommend anyone to upgrade to the new Cisco ASA line of firewalls. You will not regret it.
Subscribe to:
Post Comments (Atom)

No comments:
Post a Comment