[c-nsp] BGP support on the new ASA5585-X

Chris Evans chrisccnpspam2 at gmail.com
Fri Oct 29 18:37:54 EDT 2010


If you have to have cisco you could use an asr1k.  They support line rate
stateful firewalling and all routing protocols that you could think of.
On Oct 29, 2010 6:23 PM, "Dean Smith" <dean at eatworms.org.uk> wrote:
>>I'm sure it doesn't. Routers are routers, firewalls are firewalls.
>
> So very narrow minded. In a large complex enterprise environment a few
> thousand routes delivered dynamically to a firewall robustly via BGP would
> be a godsend - and perfectly matched to the Cisco treatment of "high" and
> "low" security interfaces. We too have had to go transparent for this
reason
> alone in many places but its not always possible. (Oh and when will we get
> an HTTPS inspect on ASA/FWSM!)
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list