ASA 1000V and ASA 5500

[josephdissmeyer]

I am hoping someone can help me answer this question:

We currently have redundant FWSM's and are planning a migration to standalone ASA 5500 series firewalls. However, we have a complete VMWare environment and are looking at the Nexus 1000V. I understand the Nexus 1000V and VSG architecture and implementation, and I do understand that the ASA 1000V is designed for cloud environments. But I do have one question about the ASA 1000V.

Is it possible for an ASA 5500 series firewall to be replaced by an ASA 1000V? Basically, can an ASA 1000V be a sole firewall solution, or are ASA 5500's still needed?

Is there a datasheet anywhere that compares the ASA 1000V and ASA 5500 series?

Thanks for your help.

-Joe

[Jennifer Halim · Accepted solution]

Depending on what you are using the ASA5500 series for currently. If you are using the ASA5500 for remote access vpn and AnyConnect VPN, it will not be supported on the first release of the ASA1000V yet.

Here is the Q&A on ASA1000V that includes more information:

http://www.cisco.com/en/US/partner/prod/collateral/vpndevc/ps6032/ps6094/ps12233/qa_c67-688050.html

Hope that answers your question.

[josephdissmeyer]

Thanks for your response Jennifer. However, the link you provided I do not have access to (I get a 403 forbidden warning).

So, the ASA1000V and ASA5500 are pretty much the same exact thing but the only thing missing from the first release of ASA1000V is VPN and AnyConnect capability, correct?

From what I am reading, it appears that ASA1000V has all functionalities of an ASA5500 except for VPN. I just want to make sure I am clear on that point.

[Jennifer Halim]

Yes, you are correct.

Try this link, it should work for you:

http://www.cisco.com/en/US/customer/prod/collateral/vpndevc/ps6032/ps6094/ps12233/qa_c67-688050.html

[josephdissmeyer]

Thank you Jennifer.