ASA 5505

[gb0mb]

I am looking at the 5505 and 5510 for my company to move to. We have simple needs, host a few services (low demand) and terminate some VPN users.

I have been reading on the 5505 and it seems that everything must be tied into a vlan. To get full functionality you will also need the Sec. + option. Can each port on the 5505 be tied to a different subnet? I am guessing if you have the base image you are limited to 3 vlans and this would not be possible (Internal, External, and DMZ). With the SEC+ and the added vlans I assume each port could be a different subnet/vlan.

The 5510 bas model which is 500-1000 more than the Sec. + 5505
seems to offer all the Sec+ features with much more room to grow.

I am thinking the 5510 is the way to go for more flexibility and subnets.

Any opinions on my assumptions?

Thanks

Gb0mb

........99.9% User Error........

 

[Supergrrover]

Your assessment is right on. The base 5505 license has limited DMZ capabilities. The Sec+ license allows a lot more.
The hardware on the 5510 is beefier. If you plan on expanding and the extra money isn't too much for you then I would get the 5510. If you aren't expanding or the money is too much, you can get away with the 5505.

I have used both and they are solid devices. The choices were mostly money concerns.

Just my 2 cents


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[gb0mb]

Thanks for the info. After reading up some more I am all for the 5510. It gives us room to grow the 5505 would be maxed out.

Gb0mb

........99.9% User Error........