Re: Enterprise Firewalls

["Bradley, Stephen W. Mr." <bradlesw () MUOHIO EDU>]

Just remember that if you get the Cisco ASA the 10Gbps solution is 5 in and 5 out.  So if you want true 10G both ways 
you get the 20G solution.  We just went through all this when we bought our 5585s last month to replace our FWSMs.  
(Separate boxes, not the blades.  Blades are even pricier than the individual boxes.)  We put two ASR1004s out in front 
of them.

thx
steve
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () listserv educause edu] On Behalf Of Foerst, 
Daniel P.
Sent: Wednesday, October 26, 2011 5:59 PM
To: SECURITY () listserv educause edu
Subject: [SECURITY] Enterprise Firewalls

Hey all,

For the past several years we have been operating with Cisco Firewall Services Modules. They have done what we needed 
them to do, but they are getting quite a bit long in the tooth.
Recently I was asked what projects I would need funding for in the coming fiscal year and I mentioned the need to 
upgrade a set of our FWSMs to be able to accommodate greater increase in our network infrastructure in addition to the 
ever changing network security topology.

I am aware that Cisco has recently made their ASA line of firewalls available as a services module to the 6500 & 7600 
series chassis switches & routers as the future for the Firewall Services Module.
However I would like to learn what others on this list use for their network security and why they chose a specific 
vendor over another. Whatever solution I select will have a minimum of 10Gbps throughput, more likely 20Gbps
So I can make an even comparison between the Cisco ASA services module and another vendor, but I really do not know 
what else to search for yet. The idea of next generation firewalls sounds interesting, but I really do not know yet.

Thanks much for anything you are will to share!

-dan

Daniel Foerst
Assistant Director, Networks & Security
The Catholic University of America
Washington, DC 20064