[c-nsp] ASA vs ISR ZBFW

[Gert Doering]

Hi,

On Fri, Sep 09, 2011 at 01:31:06AM -0400, Jay Nakamura wrote:
> I have been wondering lately, what advantages do ASA have over ISR as
> a firewall on the low end?  As just one stand alone firewall, what
> features are there for ASA that distinguishes itself?  Often, I rather
> have an ISR over an ASA so I have more flexibility in a budget
> environment.

It has "FIREWALL!!" painted on the front cover, and will not do dynamic
routing.  And the NAT is much more interesting, and the way "fixup"
helpers damage perfectly reasonable communications...

Mmmh.  This certainly doesn't read as if I like PIXen.  Wonder why.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20110909/6b22e908/attachment.pgp>