Cisco ASA5505 Gigabit?

[alig.norbert]

Hi all,

Checked the POST on an ASA5505 (9.1(3)) an it shows 2 Gigabit NIC's:

Total NICs found: 10

88E6095 rev 2 Gigabit Ethernet @ index 09 MAC: 0000.0003.0002

88E6095 rev 2 Ethernet @ index 08 MAC: 885a.92d9.f938

88E6095 rev 2 Ethernet @ index 07 MAC: 885a.92d9.f937

88E6095 rev 2 Ethernet @ index 06 MAC: 885a.92d9.f936

88E6095 rev 2 Ethernet @ index 05 MAC: 885a.92d9.f935

88E6095 rev 2 Ethernet @ index 04 MAC: 885a.92d9.f934

88E6095 rev 2 Ethernet @ index 03 MAC: 885a.92d9.f933

88E6095 rev 2 Ethernet @ index 02 MAC: 885a.92d9.f932

88E6095 rev 2 Ethernet @ index 01 MAC: 885a.92d9.f931

y88acs06 rev16 Gigabit Ethernet @ index 00 MAC: 885a.92d9.f939

Is there a Gigabit licensing on the roadmap?

Kind regards,

Norbert

[Jouni Forss · Accepted solution]

Hi,

I doubt it has anything to do with any future changes since the device is specced for only 150Mbps throughput.

I haven't seen Cisco release any replacing model even though I have asked a couple of times.

I think the 2 GigabitEthernet interfaces refer to the Internal-Data0 and Internal-Data1 interfaces

This is the output from my own ASA

Interface Internal-Data0/0 "", is up, line protocol is up

  Hardware is y88acs06, BW 1000 Mbps, DLY 10 usec

        (Full-duplex), (1000 Mbps)

Interface Internal-Data0/1 "", is up, line protocol is up

  Hardware is 88E6095, BW 1000 Mbps, DLY 10 usec

        (Full-duplex), (1000 Mbps)

Here is also a picture from a Cisco Live! presentation about the architecture of the ASA5505 model (Click to Enlarge)

Hope this helps

- Jouni

[Jeff Cooper]

it's wonderful how cisco does that - shoot themselves in the foot - ie, killing off the uc500 series before the SMB 6000 is even released, meantime another vendor is gaining ground thru all our clients...   ie  no replacement for the 5505 with it's now weak thru put...  meantime another vendor is gaining ground thru all our clients.. 

cisco has a bad habit of killing a good thing or delaying replacement when a good thing is no longer feasible in the market place.. 

unfortunately, in most the business environments of clients later part of this year, a 5505 is now a lead boot and being replaced..  just can't keep up with the demands of internet..    folks not interested in paying $3000-4000 when you can easily find a firewall WITH web filtering, load balancing for half the price, not to mention more thruput then the 5512..   same with switches, you can easily find switches half the price of cisco switches with LIFE time warranties..   in fact, of our 1000+ clients, there's really no cisco switches left, all have been replaced by another vendor.. 

dont get me wrong as we go round with our cisco account manager, but what do they know..  they only preach the slide shows upper management shows them and have no power to act on behalf of their SMB accounts in reality..  they're spoon fed from the top

i've been cisco red white and blue for over 10 years.. but it's getting very hard to continue representing them myself in the marketplace..   the uc500 now the ASA series is just more nails in the coffin..

sad times

[Jeff Cooper]

sorry, i keep hoping that like the last revs for the pix506 series (v633-635?), where the ios upgrade converted the ports from 10mb limitations to 10/100, that the same might come out for the asa5505 with gb...   but the truth is, the max it'll ever push is limited by its thruput..  it's a dead duck that can't be sold, but the one first run ASA they haven't EOL'd.. 

[andromeda]

I looked into it, but boy has a ton of bad reviews; connections dropped etc etc.

[alig.norbert]

You are right....

The whole ASA plattform has some big issues compared to other firewall products on the market:

- Still no VPN in multiple context

- No Gigabit on ASA5505 (Every smallbusiness box has Gigabit)

- No real contentfilter (Cisco Web Cloud Security is expensive and not a good technical solution -> external proxy)

- Only 2 SSL VPN in the base license

- Java/ActiveX Plugins for SSL Clientless (no support iPad/iPhone eg. if you want not to implement AnyConnect)

- No VPN handover to another interface

- No Proxy/Reverse Proxy

- No Policy Routing (Source based Routing)

- No Routing on the same interface (works with workaround)

Actually, it's hard to sell such an expensive product if you konw, that there are lot of "down"....

Only my 0.02$

Kind regards,

Norbert

[nick.jahn]

For everyone looking for a good cisco product that does firewall, uses the ASA engine, has the hardware to support full gigabit ethernet, runs SPI, runs several different types of VPN connections that windows 8 natively supports on its own, has content filtering, website filtering through both white list and black list, allows for multiple WAN connections, and supports all of this at the total throughput on the internet side for upload and download at <250Mbps I recommend looking at the RV320, and the even more powerful but more expensive RV325.

http://www.newegg.com/Product/Product.aspx?Item=N82E16833420484&cm_re=RV320-_-33-420-484-_-Product

I have this product in use in a production environment, it is actively blocking DOS, DDOS, is running SPI, has at lest 3 VPN connections running on it right now using MS-CHAP V2 encrypted authentication for PPTP, and is running a 80Mbps download 5Mbps upload with exchange 2013 piping through it 24/7 and having absolutely no lag at all. Highly recommend this product.