Solved: ASA5512 able to ...

Wei Kwong Ong · ‎01-23-2014

Hi all,

Hi, I would like to know whether ASA5512-SSD120-K9 able to do the following:

1. Configure Firewall to connect to two (2) ISPs (Basic Load Balancing)

2. Configure Firewall with application visibility and control via pre loaded on-box (single-device management version of Cisco Prime Security Manager)

- Control/Block Any P2P Application.

- Configure to Improve business-critical application performance (e.g: Skype, Video Conference & Etc)

- Configure reporting (Administrative, User, Threat Analyses, Applications)

Will be helpful if there are document to refer.

Thanks and Regards,

Ong

Julio Carvajal · ‎01-23-2014

Hello,

1) No load Balancing supported on the ASA (PBR). You could use a redundant link such that if the first one fails the other will come up.

2) Yes, with the CX you will be able to accomplishe all of that

Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Julio Carvajal · ‎01-23-2014

Hello,

1) No load Balancing supported on the ASA (PBR). You could use a redundant link such that if the first one fails the other will come up.

2) Yes, with the CX you will be able to accomplishe all of that

Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Wei Kwong Ong · ‎01-23-2014

Thanks Julio for your quick comment!

Julio Carvajal · ‎01-23-2014

Hello,

No problem.

If u need some documents:

CX and what u will be able to do:

http://www.cisco.com/en/US/docs/security/asa/asa84/asdm64/configuration_guide/modules_cx.pdf

ASA SLA

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Now FYI if you need to perform some sort of load balancing it can be done by tweaking the ASA code using NAT but as Cisco officialy says it's not supported so run it on a production enviroment could be problematic:D

Remember to rate all of the helpful posts

Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC