Will an ASA 5505 do the job?

Unanswered Question
Feb 26th, 2007

I am setting up some systems at a remote collocation facility as part of our disaster recovery plan and would like to know if the ASA 5505 will handle what I need.

There will be 4 servers:

* Exchange 2003

* Active Directory 2003

* Linux Server for WWW & FTP

* Linux server for SMTP & DNS

These are the requirements:

* ASA 5505 providing NAT and LAN-to-LAN IPSec to a Concentrator 3000.

* ASA 5505 to do port mapping for WWW, FTP, SMTP, and DNS to the Linux servers.

* ASA 5505 to provide access to Corporate network over IPSec tunnel, as well as direct internet access through the colo network.

We have some PIX 501's at remote sites working fine, but my vendor is telling me that the ASA 5505 is the replacement for the PIX 501. I just want to make sure that the features I need will be present in the model I purchase.

I've reviewed what documentation and summary info I could find, and it looks like the ASA5505-UL-BUN-K9 model will do what I need, but just want to make sure before I submit the PO.

Thanks in advance!

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3.5 (2 ratings)
Loading.
hoogen_82 Tue, 02/27/2007 - 04:23

Yes it should do it. But are you living in the US if so your part code is fine, or else order a k8 bundle which ships faster and then do a free upgrade to k9.

Also do remember to take a security plus license. Cisco has this restricted DMZ with base image.

Remember DMVPN is not supported.

Cheers

Hoogen

mattisn0w Tue, 02/27/2007 - 08:05

Thanks for the reply.

I am in the US, so the crypto is no problem.

So will I need to buy the ASA5505-SEC-BUN-K9 part number then to do the port forwarding I need?

Thanks again!

hoogen_82 Tue, 02/27/2007 - 08:19

Yeah that should do it.

Cisco ASA 5505 Unlimited-User Security Plus Bundle includes 8-port Fast Ethernet switch, 25 IPsec VPN peers, 2 SSL VPN peers, DMZ, stateless Active/Standby high availability, 3DES/AES license

ASA5505-SEC-BUN-K9

Cheers

Hoogen

Do rate if i helped :)

ccbootcamp Tue, 12/04/2007 - 22:14

Have you looked at an ISR router yet? Like an 1811? I've really taken a liken to these boxes. Yes, the ASA5505 is the replacement for the PIX 501, but take a look at the features on the 1800 series routers.

-brad

www.ccbootcamp.com

(please rate the post if this helps!)

Actions

This Discussion