Competitive advantage of PIX/ASA vs. IOS firewall feature set

Unanswered Question
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
jon.humphries Thu, 09/20/2007 - 15:15
User Badges:

Obviously you will get better throughput and VPN handiling with the ASA counterpart.

The IOS has a good security feature set , however the ASA/PIX is marketed as a firewall for a reason.

In my opinion it is a better box, as it is designed for a firewall environment. Some of the security features are much harder than the IOS.

Both the ASA and IOS devices support a kind of stateful inspection.

Another benefit is the GUI. The ASA has a much more user friendly interface for handiling firewall and vpn configurations.

The new verson 8 code, is becoming more of a UTM. In a nutsehell , this means you can do multiple things within one box, such as SSL,IPSEC,IPS, Threat Detection,Anti X. The Anti X module is quite impressive as it has a subscription to Trend, which updates regular for new virus, exploit code etc.

The monitoring is far superior on the ASA/PIX.

If security is paramount then you have to opt for Cisco's firewall range.

whisperwind Fri, 09/21/2007 - 06:36
User Badges:

Dedicated team for the asa, means faster fixes better support more features etc...

Not to overly simplify but routers route and firewalls firewall, and do not bring a knife to a gun fight!

I was never hear and you never heard that torpedo hit


This Discussion