Re: [fw-wiz] Cisco ASA and FWSM

AFAIK the FWSM is essentially a PIX 7.x that is stuck inside a
catalyst switch chassis. and an ASA is a PIX 7.x that is
bundled with some other (non-firewall) security functions .

the configuration language was 99.9% compatible between the ASA
and the FWSM, at least as of PIX 7.0. I'm not sure if Cisco kept the
code-bases evolving in sync - there were a few months in which FWSM was
shipping but PIX 7.0 was not released yet...

In my opinion, the main differences are "form factor" and pricing. If
all you need
is a firewall then you don't care about the other things the ASA may do.
If you already have a Catalyst with an empty expansion bay - it may
be convenient to get a FWSM (e.g. less rack-space).


On 4/13/07, Kimberly Fields <kimberlymfields@xxxxxxxxx> wrote:
Can anyone tell me what, if any, are the differences between the Cisco ASA
firewall features and the Cisco FWSM firewall features?

firewall-wizards mailing list

Avishai Wool, Ph.D., Cell: +972-52-333-0052
Co-founder and Chief Technical Officer
******* Firewall Management Made Smarter ******
firewall-wizards mailing list

Relevant Pages

  • Re: [fw-wiz] Cisco ASA and FWSM
    ... other asa or pix is an appliance. ... The main advantage of the fwsm is the ... I can think of off the top of my head without going to the cisco site. ...
  • Re: [fw-wiz] Cisco ASA and FWSM
    ... the CPU engine in the ASA 5500 series is ... faster than what you find in a PIX. ... An FWSM on the other hand is, as has been said, an ASA on a blade. ... come with VPN concentrator capabilities. ...
  • Re: internal firewall suggestions required
    ... There are noticable differences between the FWSM and PIX. ... VPN in a separate module is not a bad idea. ... Many of the other firewalls ...
  • Re: [fw-wiz] Thoughts on the new Cisco ASA 5500 firewalls
    ... I just spoke with a Cisco sales rep about this. ... > Cisco is marketing the ASA 5500 appliances as PIX, VPN Concentrator, Secure ... > least out of scope features, ...
  • Re: VPN from my PC to work through ASA
    ... I am trying to connect remotely via VPN to this Cisco Pix, however, I ... think the ASA is not allowing this. ...