ASA 5510

[ngonulsen]

Hi,

I'm thinking of purchasing an ASA 5510 but I want make sure it can do what I need it to do before I purchase it.

Our head office has multiple global ip's and we are bringing our website in house (cost restraints) I would like to have the external ip of the website different than the ip that everyone internal will be using to access the internet (i.e. 5510 external ip 205.150.193.66 and internal 10.0.0.1, put the webserver in a dmz with external ip 205.150.193.67 and internal 192.168.0.2). Is this possible to accomplish with the 5510?

This device will also be connecting our remote offices via VPN with a 5505, pix 506E and sonicwall TZ 180.

The model I'm thinking of purchasing is ASA5510-AIP10-K9, do I need any other modules? Will I have any issues with the Advanced Inspection and Prevention Security module?

Thank you in advance.

[francisco_1]

the model ASA5510-AIP10-K9 is the Cisco ASA 5510 Adaptive Security Appliance with SSM-AIP-10 (chassis, software, 50 VPN peers, 4 Fast Ethernet interfaces, Triple Data Encryption Standard/Advanced Encryption Standard [3DES/AES])

you taking cost in to consideration so yeah the ASA5510 will do what you want. it comes with 5-10/100, one for your inside network, the rest you can use for DMZ and public network. you can have 250 maxium site-to-site to your other firewalls with 3DES/AES VPN throughput up to 170Mpbs.

Francisco

[ngonulsen]

Thanks Francisco.

I have one other question, from your statement I will not need to purchase 25 licenses for my remote users?

Thanks

[francisco_1 · Accepted solution]

dont think so. ASA5510-SEC-BUN-K9 will do just fine for you.

Francisco.

[ngonulsen]

Thanks for your help.

[francisco_1]

if you want to do SSL/IPsec VPN, then you need the correct license depending on the number of IPSEC/SSL VPN peers.

see http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Francisco

[ngonulsen]

Yes, I know that it supports 2 sessions but I would need the licences for more.

Thanks again