Firewall queries

md__shamsuddoha · ‎04-29-2017

I want to need a firewall which must have to the following criteria.

1. Firewall performance (Large packets) 19.5 Gbps with multiprotocol performance of 9.6 Gbps

2. IPS and App visibility combine performance should be 5.5 Gbps

3. Firewall should support maximum 1,750,000 concurrent connections

4.Firewall should support maximum 115,000 new connections per second

5.Should deliver VPN throughput of 2.8 Gbps

6.Firewall should support upto 240 virtual context/firewall

7.VPN supporting 10000 IPSec / SSL VPN peers
8.Next Gen FW feature should be included.

Please suggest me

Thanks

Shuvo

Marvin Rhoads · ‎04-29-2017

It sounds as if you are responding to a request for proposal. If that's the case, this isn't really the best place to get your bill of material for a proposal.

That point aside, it looks as if somebody wrote a request based on the specifications of an ASA 5585-X with SSP40. The only problem is with the NGFW bit. That's the FirePOWER service module. While you can technically still order them (until August 2017), their end of sales has been announced.

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-x-series-next-generation-firewalls/eos-eol-notice-c51-738643.html

Also, you would need to up the model to 5585-X with SSP60 to hit some of the numbers.

The whole request would bear an actual discussion with the customer though to qualify whether the environment would be a good fit for a current generation FTD appliance. They can currently satisfy all of the technical requirements except SSL VPN and multiple contexts (and those features are on the roadmap). They would be less cost than the 5585X and have a much longer useful lifetime.