Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Will an ASA 5505 do the job?

I am setting up some systems at a remote collocation facility as part of our disaster recovery plan and would like to know if the ASA 5505 will handle what I need.

There will be 4 servers:

* Exchange 2003

* Active Directory 2003

* Linux Server for WWW & FTP

* Linux server for SMTP & DNS

These are the requirements:

* ASA 5505 providing NAT and LAN-to-LAN IPSec to a Concentrator 3000.

* ASA 5505 to do port mapping for WWW, FTP, SMTP, and DNS to the Linux servers.

* ASA 5505 to provide access to Corporate network over IPSec tunnel, as well as direct internet access through the colo network.

We have some PIX 501's at remote sites working fine, but my vendor is telling me that the ASA 5505 is the replacement for the PIX 501. I just want to make sure that the features I need will be present in the model I purchase.

I've reviewed what documentation and summary info I could find, and it looks like the ASA5505-UL-BUN-K9 model will do what I need, but just want to make sure before I submit the PO.

Thanks in advance!


Re: Will an ASA 5505 do the job?

Yes it should do it. But are you living in the US if so your part code is fine, or else order a k8 bundle which ships faster and then do a free upgrade to k9.

Also do remember to take a security plus license. Cisco has this restricted DMZ with base image.

Remember DMVPN is not supported.



New Member

Re: Will an ASA 5505 do the job?

Thanks for the reply.

I am in the US, so the crypto is no problem.

So will I need to buy the ASA5505-SEC-BUN-K9 part number then to do the port forwarding I need?

Thanks again!


Re: Will an ASA 5505 do the job?

Yeah that should do it.

Cisco ASA 5505 Unlimited-User Security Plus Bundle includes 8-port Fast Ethernet switch, 25 IPsec VPN peers, 2 SSL VPN peers, DMZ, stateless Active/Standby high availability, 3DES/AES license




Do rate if i helped :)

Re: Will an ASA 5505 do the job?

Have you looked at an ISR router yet? Like an 1811? I've really taken a liken to these boxes. Yes, the ASA5505 is the replacement for the PIX 501, but take a look at the features on the 1800 series routers.


(please rate the post if this helps!)

CreatePlease login to create content