Re: [fw-wiz] Thoughts on the new Cisco ASA 5500 firewalls

From: Chris Byrd (cbyrd01_at_gmail.com)
Date: 05/19/05

  • Next message: Paul D. Robertson: "Re: [fw-wiz] A fun smackdown..." 
    To: firewall-wizards@honor.icsalabs.com
Date: Thu, 19 May 2005 09:41:18 -0500

    I just spoke with a Cisco sales rep about this. According to him, the
    ASA 5500 is running the same OS as the latest Pix FWs (7.0), with the
    other stuff bolted on top. It is also running the same ASICs as their
    IPS devices. That does make me feel a *little* better about this, but
    I do still need to eval one in person.

    Thanks for your input,

    - Chris

    On 5/19/05, Paul Melson <psmelson@comcast.net> wrote:
    > Cisco is marketing the ASA 5500 appliances as PIX, VPN Concentrator, Secure
    > IDS, and network anti-virus in a single box. Which leads me to believe that
    > it's either brand-centric marketing hype gone overboard (caveat emptor), or
    > that there is some actual code convergence. If the latter is true - which
    > is not so impossible, since only the VPN 3K code needed porting to x86, PIX
    > and Secure IDS have been there forever - then that should make Chris'
    > decision pretty easy. If it's a PIX plus other possibly irrelevant, or at
    > least out of scope features, buy the PIX.
    >
    > I've not had any experience with the ASA 5500 appliances, but I've been
    > elbow deep in several other 'converged' security devices. It is my NSHO
    > that when you combine several products, none of which are best-of-breed,
    > into a single box, what you end up with is a box that does a lot of things,
    > but none of them well AND can't scale or handle big loads.
    >
    > PaulM
    >
    > -----Original Message-----
    > Subject: Re: [fw-wiz] Thoughts on the new Cisco ASA 5500 firewalls
    >
    > > What are your thoughts on the new ASA from Cisco? Would the
    > > additional features (IPS, AV, integrated VPN, active-active failover)
    > > be worth the risk of being on the cutting-edge? Has anyone on the
    > > list worked with one yet?
    > >
    >
    > The only time I'd ever deploy a new-to-the-market product was if I had time
    > to evaluate it personally.
    >
    >
    > Do the new features outweigh the risk of having an upset or worse yet-
    > unprotected client? Only you *and* the client can answer that. Their risk
    > tolerance is probably the biggest piece of input you can have.
    >
    >
    >
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Paul D. Robertson: "Re: [fw-wiz] A fun smackdown..."

    Relevant Pages

    • Re: [fw-wiz] Cisco 2811 vs. ASA 55xx
      ... Cisco ASA units are the replacements/upgrades for the PIX. ... "Is the lack of flexibility of the ASA justified by the higher performance? ... I'm not real sure what you're trying to do security-wise with a Cisco router that a Cisco firewall appliance cannot do. ...
      (Firewall-Wizards)
    • Re: Netdisco
      ... Cisco ASA ist der "Nachfolger" der Cisco Pix ... Die ASA hat mehr Performance als die Pix, ... VPN Client Lizenzen fuer IPSEC VPN sind KOSTENLOS ...
      (de.comp.security.firewall)
    • Re: [fw-wiz] Cisco ASA and FWSM
      ... other asa or pix is an appliance. ... The main advantage of the fwsm is the ... I can think of off the top of my head without going to the cisco site. ...
      (Firewall-Wizards)
    • Re: [fw-wiz] Thoughts on the new Cisco ASA 5500 firewalls
      ... From what i know looking PIXen inside and outside, IDS module is packet capture ... > Cisco is marketing the ASA 5500 appliances as PIX, VPN Concentrator, Secure ...
      (Firewall-Wizards)
    • [Full-disclosure] Trustwaves SpiderLabs Security Advisory TWSL2009-002
      ... Trustwave's SpiderLabs Security Advisory TWSL2009-002: ... Cisco ASA Web VPN Multiple Vulnerabilities ... Vendor: Cisco Systems, Inc. ...
      (Full-Disclosure)