Cisco Recommendations

Posted on 2006-04-11
Last Modified: 2013-11-16
I'm going to be hosting several (probably around 20 to 30) terminal servers for remote clients. I'm looking for a recommendation for a Cisco firewall. I'm considering the ASA 5510. Each client will have a unique "real world" IP address that they use to connect. The firewall will have subinterfaces for these connections. On the back side of the firewall, the terminal servers will be using ip address in the private range. I want the clients to use a real-world IP address and the firewall to forward the traffic (after checking it) to the appropriate internal server.

Is it overkill to use the ASA 5510? Does someone have a different recommendation??

Thanks for the help!!
Question by:wjester
    LVL 1

    Expert Comment

    Hey wjester,

    It probably is overkill if those are your only requirement.  The ASA's are awesome... I'm working with quite a number of them and they are really great, but if the requirements that you listed are it... almost any firewall has the performance and abilities that you need. You could even use one of the soho 871 routers from Cisco for the NAT'ting that you require.  Now having said that I just reread your post and now see the stipulation about the sub-interfaces... In terms of those if you are trying to segment each of the terminal servers from each other as well by using sub-interfaces and vlans then I don't think the 871 will do it (I'm not sure... I know they support vlans, but I don't know about sub-interfaces)  What switch and/or router are you using?  Any of the new cisco integrated routers (1800, 2800s, etc) with the advanced security set will support the natting you require and the sub-interfaces (as does the ASA).  
    LVL 7

    Author Comment

    Thanks for the reply techeez...
    I was thinking about utilizing the subinterfaces on the firewall and vlans on the switch to keep everything seperate. I'm using Dell 3000 series switches. I'm not using a router as the Internet provider I have is providing the ip address block. Do you think I'd be better of using a Cisco router (2800 series, for example) with the appropriate security and firewall software on it?? I kinda like the ASA firewalls because they are (for the most part) geared for what I'm looking to do.
    LVL 1

    Accepted Solution

    I don't know about the subinterfaces and the dell (Is is the 33xx series or?)... You would have to test it out and ensure that the subinterfaces worked correctly on the trunk port on the switch...  If it does then you would be fine with the asa or the 2800/1800 series.  As for which is better... at the end of the day your requirements are such that I think either are appropriate I'm not sure what your budget is, or what the various price differences are... It would depend on whether or not you think you will have any need for any of the advanced firewall features of the ASA (which are plentiful :) ) If you think you might ever be looking at an IPS system or traffic inspection, etc. then the asa is going to do better in the long run.

    LVL 9

    Expert Comment

    You might want to look at Juniper. Prices are comparable or cheaper than Cisco, and you get comparable or better performance.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now