- ASDM configuration
- URL filtering
It's pretty easy to connect between different branches using site to site VPN.
Cost, it's very expensive. To migrate from a Cisco ASA 5550 and not drop in performance, you have to go to a Cisco ASA 5555-X with FirePOWER. To fully use the Cisco FirePOWER IPS, AMP and URL filtering, you are forced to (MUST) buy the Cisco FireSIGHT management centre. You also have to buy licensing for Cisco AnyConnect VPN client
I've been using it since October 2004, so for 10 years.
Due to the cost, I am still waiting for more funds to deploy the final phase, FirePOWER IPS, AMP and URL filtering.
Cisco did an upgrade from v8.2 to v8.3 of the migration system. NAT configuration is different from 8.2 to 8.3. It's not easy to upgrade to 8.3 and above leading to running different software versions.
V8.2 is very stable. With the latest versions it's still early to tell.
Upgrading from v8.2 to v8.3 is a nightmare. The risks of down time are so high that I am forced to run different versions. Stay with 8.2 on all NAT dependent on your ASA, but again it's all about the cost.
Excellent customer service. Cisco listens to their customers.Technical Support:
Excellent customer service and documentation.
We previously used Checkpoint, and I switched because Checkpoint was expensive but now it looks like Cisco is following the same route.
It was not that complex because I was using Cisco routers and switches five years prior.
It was an in-house implementation.
I can't tell right now as I am still investing.
The initial investment on the Cisco ASAs was around one million South African Rand and there's a R200,000 annual maintenance cost with Cisco's partners.
No. I went straight to Cisco because of my experience with their CUCM IPT solutions, routers and switches.
Budget a lot of money, especially on the initial setup and the annual licensing and maintenance cost.