BGP in firewall/ASA

rajeshchandran · ‎09-23-2009

HI,

I have a client who is going for a new Firewall. However he seems to have got some positive points on having BGP in his PIX/ASA from some website. From my information his is going to be an intranet with just one gateway to the internet.

dies he really need a firewall with BGP.

What are the advantages if he goes for a Firewall with BGP

Rgds

Rajesh

kumar · ‎09-24-2009

hi, Please see the following link

http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a00800949e8.shtml#eighteen

naveen_b81 · ‎09-24-2009

It all depends on his requirements. If there is just one path without any redundant paths requiring convergence, I wouldn't suggest BGP.It is as simple like a firewall is not meant for routing. There are a lot of Bug's and limitation by using BGP or infact routing on Cisco PIX/ASA.

I think that your client might have confused with the situation where BGP is run between two routers through a firewall - which means running BGP betwen two routers on different sides of the firewall.