Customer Reviews

Cisco ASA5505-BUN-K9 ASA 5505 10 User Security Appliance

5 star:		(10)
4 star:		(3)
3 star:		(0)
2 star:		(0)
1 star:		(6)

 

 

Pros:

* Very stable. Many home and even business grade Firewalls will occasionally start acting up and have to be rebooted, but the ASA is completely solid.

* 8 port switch w/ 2 PoE ports is great for things like IP Phones and Wireless Access Points.

* AnyConnect SSL VPN with 2 client licenses included is a great value. This lets me access my home network from work, despite them requiring a proxy server.

* Supports Spanning Tree and Rapid Spanning Tree, allowing you to build redundant uplinks to STP compatible switches.

* 256 MB RAM and 128 MB of flash is plenty of Memory for future software.

* Tons of VPN options - Straight IPSec, DMVPN, L2TP, SSL, AnyConnect, etc. The IPSec VPN is support on the iPhone, so it's pretty cool to be able to access my home network from my phone.

Cons:

* High learning curve, especially if you don't have previous experience with Cisco PIX or routers. Even using the Java-based ASDM, it can take a few hours of training to find your way. Also, ASDM is not compatible with the latest version of Java (you'll get an 'unconnected sockets' message).

* Only supports 1 internal VLAN with default license. This is fine for most setups, but disappointing since the Cisco routers will do at least 2 VLANs. It prevents, for example, having separate VLANs for voice and wireless, or creating a DMZ.

* No built-in Wireless option. Check out the 870 or 1800 routers if this is important. Adding a Wireless AP is easy though, especially with the PoE ports.

* No support for DHCP reservations. I like to configure Servers and Printers this way, and can't find any good reason Cisco wouldn't support it like they do on their routers and Layer 3 switches.

Summary - A great value as a SOHO Firewall and VPN Appliance. The ASA 5505 is priced the same as the PIX 501 was, but adds 2 PoE ports and SSL VPN Capabilities. The biggest drawbacks I can see are the high learning curve, no built-in Wireless, and lack of DHCP reservations. Before purchasing, you'll probably want to take a look at the 870 series routers since they may be a better choice depending on your requirements.

I'm using this device in my home network, replacing a Linksys WRT54G. It's great, and packs the functionality of 3 expensive pieces of gear into one box (fully-functional switch, low-end router and VPN concentrator/firewall.) The best next-level comparison would be something like the Cisco 891 integrated services router, which is about triple the cost. I thought I'd write this to balance out some of the very negative reviews and clear up some confusion.

PROS:
- Single-box solution that's a big step up from the Linksys devices
- 8 10/100 switchports, 2 with PoE in case you happen to have IP phones or switches that support that standard
- Supports a subset of routing features that other IOS-based Cisco routers use
- Tons of VPN options, allowing you to set up site-to-site or client-based connections to the network
- Basic config out of the box is extremely simple, and the unit ships with a sinple NAT-and-DHCP style setup tailored for use with broadband providers
- If you don't like the command line, Cisco ships a reasonably good Java-based GUI that also lets you pull statistics from the device
- Excellent throughput, solid performance so far. New models ship with 512 MB of flash to accomodate the new firmware and GUI packages.

CONS:
- Unless you purchase or have access to a maintenance contract (SMARTnet) from Cisco, you're not entitled to software upgrades or warranty support. Once you buy this from a reseller, you'll get access to the Cisco support site to get what you need. Same goes for hardware -- 90-day warranty without a contract, so make sure you unbox it and burn it in right away to sniff out DOA devices!
- Lacks a 1000BaseT port for the uplink - the Cisco 891 is the next step up that has this if you're lucky enough to have Metro Ethernet-level connectivity
- This Is Not A Linksys SOHO Router! Unless you're familiar with Cisco gear, the IOS command line and the way you configure a Cisco device, it can be a challenge to set anything up beyond the basics. The GUI is OK, and the CLI is not very hard to learn once you read the manual and get used to the way Cisco thinks w.r.t IOS configuation statements. Just don't expect plug-and-play the same way you would for a device you purchase from Best Buy, and spend a little time getting used to it.
- Many features are locked out via a software license. Cisco is very smart and sells the base device at a low price point. If you want full DMZ support (>2 fully connected VLANs) and VLAN trunking, you need to upgrade to the Security Plus license, which costs as much as the initial hardware investment. :-) The same applies if you want to increase the number of VPN users, the type of VPN clients supported, and other advanced features. Just keep this in mind if you want to have a DMZ accessible from both the inside and outside interfaces or have to funnel more than one VLAN over a single WAN link (think data/IP phones.)

TIP: For those who aren't familiar with the Cisco IOS or want a really quick-start configuration, I found a great guide that will (a) get you going, (b) illustrate the multi-layer configuration process for those unfamiliar with IOS, and (c) give you an idea of what the ASA's capabilities are: http://atc.go0se.com/?p=747

Overall, I would highly recommend this to anyone who wants a more capable firewall and router for home, doesn't mind the lack of gigabit Ethernet, and is willing to invest the time needed to get it working properly.

I've used everything from ipchains on a bsd server, to sonicwall, to netscreen, to the ASA. The ASA is very powerful, and features a friendly intuitive interface for new users (ASDM).

The integrated switch and power-over-ethernet ports are a great bonus.

This is a very good product. An enterprise class firewall. But beware, some Cisco IOS or Cisco ASDM is required. I work with Cisco products in a daily basis and I bought one of this from Amazon and now my Internet speed is as advertise by my ISP (10Mbps). The two POE ports are very handy. SSL VPN is very stable also. Only drawback is that does not have DDNS.

We've had no problems with this router/firewall - extremely reliable. Extensive configuration samples, etc. exist on Cisco's web site.

I just received this product from Amazon. Upon inspection of the actual product package I noticed that all the original Cisco seals were broken. This includes the Cisco branded security tape and the two technical description labels located on either side of the box. I have not used the product yet as I am debating on whether or not to return it to Amazon for an actual newly unopened product.

I purchased this primarily to add VPN capability to my network. I have been using this for several months now and it is working perfectly. In my set-up, it is connected to a cable model on the front side and several computers and a wireless router on the inside. Though this is labeled as small business appliance, this works on the same platform as an enterprise device and offers most of the features of higher end devices. However, this is not for novice users. You need to have better than average network set-up skills to make this work the way you want it. Hence the 4 stars for otherwise a perfect device.

I'm adding this review because I was very nervous about buying this product because somebody had previously commented that they received absolutely no customer service from Cisco. I bought the product, and like other people, I couldn't figure it out. It was just over my head. You really do need to be a network engineer or very network savvy to configure this firewall. However, I called up Cisco Customer Service and they were incredible! Seriously, I had to configure the firewall for a PBX server. I gave the Cisco customer service guy all of the requirements that the PBX company required, in terms of all of the port forwarding and configuration etc., and the Cisco engineer literally logged into the firewall and configure the entire thing for me! I was blown away. I thought I was going to have to hire somebody to do it, and he just did it for me. I'm totally happy. Everything is working perfectly now. Pretty amazing in my opinion. I just called the regular tech support phone number on their website. If you need this powerful of a firewall and don't know what you're doing, in my experience, Cisco will take care of you.

The Cisco Applied Security Appliance (ASA) 5505 is a great choice to secure a small office or home network. Actually, it would be great for a medium office with it's Virtual Private Network (VPN) connections and ability to handle a significant amount of network traffic. It is in a decent configuration coming out of the box, although mine was not at the current OS version (a release behind).

The ASA 5505 uses the same operating system as the largest of Cisco's firewalls, the ASA 5550. The 5505 comes in several versions that allow different VLAN and VPN combinations, so check your ordering information carefully. The standard has 3 virtual LANs (VLANs) that allow an inside(trusted), outside(untrusted and DMZ(partly trusted) security levels. Traffic can be permitted between interfaces as needed to meet your requirements.

The ASA 5505 can support up to 25,000 connections and a throughput of 150Mb per second. It has 8 ethernet connections, two of which are Power over Ethernet (PoE) and able to power VoIP phones or other devices.

I've worked with these units since they came out. They have really progressed with the new code updates and offer all the features of the higher end firewalls (like the 5510), but for a small business price. The only thing to be careful of is all the licensing. Research what you need before purchasing. I am looking forward to when they add an IPS and/or wireless module into it.

Make sure you go to Cisco.com and download the latest ASA and ASDM images.
My only gripe about this unit is that I wish the switch port was gigabit.