[c-nsp] ASA Firewall vs IOS

[Jason Gurtz]

> Thanks... I was afraid of that.  Have ran FW on IOS for various
> reasons but it's definitely no match for the ASA stuff... got a
> couple of offline replies stating that MSN still isn't
> blockable at the application level in the FW Feature Set..
> shame...

We run a tipping point outside our pix for this type of filtering.  Our
Cisco rep would prefer we not, but it just works, has decent reporting,
etc...

Might be worth a look.

~JasonG

--