Solved

Cisco ASA 5505

Posted on 2009-05-15
4
489 Views
Last Modified: 2012-05-07
I was wondering if anybody could give me some advice - there will be three servers (web/mail/TS) in a data centre, we are thinking of putting them behind ASA 5505 firewall - there won't be any local users and any VPN connections - all access will be from the outside - I'm comfortable in saying that ASA's 10000 concurrent connection limit would be fine.
As I understand it - ASA's 10 user limit is based on translation table what should be just fine in our case (6 static translations) - the only concern I have is performance.
Can anybody advise on it?

thanks

 
0
Comment
Question by:rxal
  • 2
  • 2
4 Comments
 
LVL 4

Accepted Solution

by:
lkraven earned 250 total points
ID: 24398149
With no VPN in place, the ASA 5505 is capable of an aggregate 150Mbps.  I don't know the size of your uplink to the internet, but I suspect that you will saturate it well before the ASA will hit any bandwidth limitations.

The 10 "user" limit is based on the number of IP addresses behind the firewall, so you won't run into that as an issue either.

Transit time through the ASA 5505 is not much different from any other security appliance-- you will add a hop, but the box itself doesn't add much more latency than other firewall appliances that cost less than $10k.

It seems to me that the ASA is ideally suited for this particular use, IF you want to stay with Cisco.  If not, there are a variety of other good options, Fortinet and Juniper being two I favor, but once it's set up, they'll all be very good choices, the ASA 5505 included.
0
 

Author Comment

by:rxal
ID: 24419794
thanks lkraven - the servers will be on 100MBit/100Mbit uplink what I believe won't be of any problem

By the way are they much different to PIX firewalls in terms of setup?
 

0
 
LVL 4

Expert Comment

by:lkraven
ID: 24423839
The ASA CLI continues to get more and more IOS like, but if you are familiar with how the Pix works, it is not very much different.
0
 

Author Comment

by:rxal
ID: 24439667
ok - the more IOS like the better for me as to be honest I didn't like the differences between PIX CLI and Routers CLI - thanks again
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question