Welcome to ISAserver.org

Its sucks, boss wants to replace ISA with ASA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Misc.] >> ISA Firewall Coffee Shop >> Its sucks, boss wants to replace ISA with ASA

Page: [1]

Message

<< Older Topic Newer Topic >>

Its sucks, boss wants to replace ISA with ASA - 24.Oct.2006 1:31:49 PM

ITEngineer

Posts: 256
Joined: 3.Feb.2006
Status: offline

iam really frustrated, my boss wants to replace ISA 2004 with Cisco ASA 5500

He is saying that this HW FW has built in antivirus and antispam !!!
i have been working with ISA 2004 since 2 years and i really like it.

i wish i can kick my boss as* with this decision .
I am sure this Cisco ASA 5500 is not integrated with AD !! thats why he is saying that if we want to keep ISA in place, we will use it only as a proxy ( 1 nic ) !!!!

Does anyone has a list of disadvantages of ASA 5500 ??!!

or comparing ISA to ASA 5500.

< Message edited by ITEngineer -- 24.Oct.2006 1:42:02 PM >

Post #: 1

Featured Links*

RE: Its sucks, boss wants to replace ISA with ASA - 27.Oct.2006 1:19:33 PM

sikoniko

Posts: 57
Joined: 14.Oct.2002
Status: offline

I am using both ISA2006 and the ASA5510.

You have to have a radius server, such as TAC-ACS+ to do AD Authentication with Cisco products.

The ASA does not have virus protection in it. You can set it up to check if the client has A/V installed on their PC and if it is current. Part of the NAC (network access control).

We are using it because I like to keep my site 2 site (s2s) vpn's all cisco. much easier to manage.

I love the SSL VPN built into the ASA.

It really depends on your needs why to go ASA. I like the ISA as a firewall the best.

SSL VPN is an awesome solution. If you are using citrix, you might look into the secure access gateway(SAG). that is a pretty good box. It really depends on what you need it for though. the SAG doesnt appear to handle s2s though.

(in reply to ITEngineer)

Post #: 2