2851 Router - Firewall replacement??

nemesis42 · ‎06-06-2008

We are currently running a PIX 515E behind a 2851 router balancing two internet pipes via BGP.

It has been recommended to us that we upgrade the PIX to the ASA line.

Is there a good reason not to use the Firewall/VPN capabilities available in the 2851 and eliminate the additional box?

We have two point-to-point VPN tunnels to remote offices running PIX501's and a handful of users accessing client VPN, though that may change if we can do SSL VPN.

Any advice would be greatly appreciated!

paolo bevilacqua · ‎06-06-2008

Hi, firewall/vpn services on the router work comprehensively and effectively, like or better of what you get using a separate device.

You will find that using the router for that generally gives a simplified configuration and addressing plan, easier troubleshooting, more versatility and scalability.

Hope this helps, please rate post if it does!