Cisco Recommendations

I'm going to be hosting several (probably around 20 to 30) terminal servers for remote clients. I'm looking for a recommendation for a Cisco firewall. I'm considering the ASA 5510. Each client will have a unique "real world" IP address that they use to connect. The firewall will have subinterfaces for these connections. On the back side of the firewall, the terminal servers will be using ip address in the private range. I want the clients to use a real-world IP address and the firewall to forward the traffic (after checking it) to the appropriate internal server.

Is it overkill to use the ASA 5510? Does someone have a different recommendation??

Thanks for the help!!
LVL 7
wjesterAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

techeezCommented:
Hey wjester,

It probably is overkill if those are your only requirement.  The ASA's are awesome... I'm working with quite a number of them and they are really great, but if the requirements that you listed are it... almost any firewall has the performance and abilities that you need. You could even use one of the soho 871 routers from Cisco for the NAT'ting that you require.  Now having said that I just reread your post and now see the stipulation about the sub-interfaces... In terms of those if you are trying to segment each of the terminal servers from each other as well by using sub-interfaces and vlans then I don't think the 871 will do it (I'm not sure... I know they support vlans, but I don't know about sub-interfaces)  What switch and/or router are you using?  Any of the new cisco integrated routers (1800, 2800s, etc) with the advanced security set will support the natting you require and the sub-interfaces (as does the ASA).  
0
wjesterAuthor Commented:
Thanks for the reply techeez...
I was thinking about utilizing the subinterfaces on the firewall and vlans on the switch to keep everything seperate. I'm using Dell 3000 series switches. I'm not using a router as the Internet provider I have is providing the ip address block. Do you think I'd be better of using a Cisco router (2800 series, for example) with the appropriate security and firewall software on it?? I kinda like the ASA firewalls because they are (for the most part) geared for what I'm looking to do.
0
techeezCommented:
I don't know about the subinterfaces and the dell (Is is the 33xx series or?)... You would have to test it out and ensure that the subinterfaces worked correctly on the trunk port on the switch...  If it does then you would be fine with the asa or the 2800/1800 series.  As for which is better... at the end of the day your requirements are such that I think either are appropriate I'm not sure what your budget is, or what the various price differences are... It would depend on whether or not you think you will have any need for any of the advanced firewall features of the ASA (which are plentiful :) ) If you think you might ever be looking at an IPS system or traffic inspection, etc. then the asa is going to do better in the long run.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jabiiiCommented:
You might want to look at Juniper. Prices are comparable or cheaper than Cisco, and you get comparable or better performance.
www.juniper.net
Jim
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.