Re: Firewall replacement

[Jeff Kell <jeff-kell () UTC EDU>]

On 3/7/2011 3:51 PM, King, Ronald A. wrote:
> We use ASAs here as well.  We are very happy with them.  In addition
> to firewalling, we use them for user client based VPN, SSL VPN, and
> site to site.  We also through the full Emerging Threats IP block list
> at them which they handle like champs.  We have 2 in active-passive. 

We also use ASAs, but two 5540s in active/active mode (thus no VPN). 
They've been rock solid on failover and in-service updates.

Our legacy VPN is on an aging PIX, but have two smaller ASAs in testing
to deploy to take it's place for VPN (client and site-to-site).

Jeff