ASA5510 deployment question

[skombathula]

We purchased ASA5510 for webVPN and IPSec VPN solution. We have PIX already in place for our perimeter security and we use 3 interfaces on the PIX firewall. Appreciate if somebody could suggest an ideal deployment solution for introducing ASA5510 into our existing network

[Fernando_Meza]

Hi .. Are you planning to replace the current PIX with the ASA ..? or are you planning to use the ASA for remote access only ..?

[skombathula]

I am planning to use it for Remote access only as I have PIX covering the perimeter network.

[grant.maynard]

Since the ASA can do traffic filtering for remota ccess users, I see no need to force VPN traffic through the PIX. So just put the ASA in parallel with the PIX, inside-outside.

Or you could replace the PIX with the ASA, because there's no point in over-complicating the setup when one box will do it all.

I'd go for the second option.