I'm using this device in my home network, replacing a Linksys WRT54G. It's great, and packs the functionality of 3 expensive pieces of gear into one box (fully-functional switch, low-end router and VPN concentrator/firewall.) The best next-level comparison would be something like the Cisco 891 integrated services router, which is about triple the cost. I thought I'd write this to balance out some of the very negative reviews and clear up some confusion.
PROS:
- Single-box solution that's a big step up from the Linksys devices
- 8 10/100 switchports, 2 with PoE in case you happen to have IP phones or switches that support that standard
- Supports a subset of routing features that other IOS-based Cisco routers use
- Tons of VPN options, allowing you to set up site-to-site or client-based connections to the network
- Basic config out of the box is extremely simple, and the unit ships with a sinple NAT-and-DHCP style setup tailored for use with broadband providers
- If you don't like the command line, Cisco ships a reasonably good Java-based GUI that also lets you pull statistics from the device
- Excellent throughput, solid performance so far. New models ship with 512 MB of flash to accomodate the new firmware and GUI packages.
CONS:
- Unless you purchase or have access to a maintenance contract (SMARTnet) from Cisco, you're not entitled to software upgrades or warranty support. Once you buy this from a reseller, you'll get access to the Cisco support site to get what you need. Same goes for hardware -- 90-day warranty without a contract, so make sure you unbox it and burn it in right away to sniff out DOA devices!
- Lacks a 1000BaseT port for the uplink - the Cisco 891 is the next step up that has this if you're lucky enough to have Metro Ethernet-level connectivity
- This Is Not A Linksys SOHO Router! Unless you're familiar with Cisco gear, the IOS command line and the way you configure a Cisco device, it can be a challenge to set anything up beyond the basics. The GUI is OK, and the CLI is not very hard to learn once you read the manual and get used to the way Cisco thinks w.r.t IOS configuation statements. Just don't expect plug-and-play the same way you would for a device you purchase from Best Buy, and spend a little time getting used to it.
- Many features are locked out via a software license. Cisco is very smart and sells the base device at a low price point. If you want full DMZ support (>2 fully connected VLANs) and VLAN trunking, you need to upgrade to the Security Plus license, which costs as much as the initial hardware investment. :-) The same applies if you want to increase the number of VPN users, the type of VPN clients supported, and other advanced features. Just keep this in mind if you want to have a DMZ accessible from both the inside and outside interfaces or have to funnel more than one VLAN over a single WAN link (think data/IP phones.)
TIP: For those who aren't familiar with the Cisco IOS or want a really quick-start configuration, I found a great guide that will (a) get you going, (b) illustrate the multi-layer configuration process for those unfamiliar with IOS, and (c) give you an idea of what the ASA's capabilities are: http://atc.go0se.com/?p=747
Overall, I would highly recommend this to anyone who wants a more capable firewall and router for home, doesn't mind the lack of gigabit Ethernet, and is willing to invest the time needed to get it working properly.