ASA 5510s

charlottebandito

Quick Question, Mike.

If you're building your own lab, wouldn't it be cheaper to get 2 PIXs with 7.2 & an IDS 4210 upgraded to IPS 5.1 IOS?

Man, those two 5510 ASAs w/ AIP-SSM (IPS) modules look VERY expensive for someone who currently doesn't have access with CCSP equipment to practice on. Would appreciate your input here.



*dang, I was trying to respond to the "Pix versus ASA for studying" thread*

mikej412

I got 2 unrestricted PIX 515s to do failover and contexts for the CCIE Security Lab..... For the CCSP, you could probably get by with faking the failover (or using PEMU) since it really isn't a difficult configuration. For WebVPN for the Lab I got a ASA5505 -- and that seems to be the biggest difference that would affect you for the CCSP.

The AIP-SSM isn't in the CCIE Security Lab --yet. And I'm hoping never to see one there (or in my home lab).

For the Security Lab I've got a 4235 upgraded with the PIX-4FE-66 running 5.1 and I also upgraded my 4210 to 5.1. For the CCSP you can definitely get by with the upgraded 4210 (and sub-interfaces and inline VLAN pairs).

Pix verses the ASA for studying

charlottebandito

I was trying to add my post to that thread but screwed up by clicking the "New Topic" button instead. Newbie move.

Thanks.

mikej412

You could always copy your first post here and try again to get it in the other thread....

Then I could do the same with my replay.

Then I could make this thread disappear.... and no one would ever know.