Replacing PIX 515 failover pair with ASA 5505s

[cctechcco]

Hi,

I've got a pair of PIX 515's operating as an Active/Passive pair. They sit in front of 3 DMZs and an Inside network; each DMZ has it's own subnet (I've got a /28 from our ISP on the Outside interface and two static routes letting me use the other two /27's).

Can I just replace these with two ASA 5505's running the 'Security Plus' license?

Warmest Regards,

jmi

[Collin Clark · Accepted solution]

As long as you plan on staying A/P in your failover, you should be fine.

Hope that helps.

[cctechcco]

It does indeed help - thank you very much.

Warmest Regards,

jmi