Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Why would I use an ASA for a firewall over using an ASR?

I need some firewalling and I need some routing.  But I only want to buy one.  So basically do I buy a Router and do firewalling on it or do I buy a Firewall and do some routing on it?

Everyone's tags (2)

Why would I use an ASA for a firewall over using an ASR?

Hello Luis,

I think the ASA would be your best option, firewalling talking is awesome and so flexible. Then it provide you tools that are unique for troubleshooting purposes ( Packet-tracer as an example)  Now on the routing side it can integrate really well in a routing desing . So I will go on that road.

Of course with a router you will be able to do differente things like build DMVPN or GETVPNS, and you will support more routing protocols but the Firewall is not as flexible as the ASA. Of course the ZBFW is really flexible but I would say "playing with the ASA is easier than the Zone-based firewall router" as the ASA was designed to be a security device



Looking for some Networking Assistance? Contact me directly at I will fix your problem ASAP. Cheers, Julio Carvajal Segura
CreatePlease login to create content