FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] Cisco ASA and FWSM

To: "Firewall Wizards Security Mailing List" <firewall-wizards@listserv.icsalabs.com>
Subject: Re: [fw-wiz] Cisco ASA and FWSM
From: "kevin horvath" <kevin.horvath@gmail.com>
Date: Fri, 27 Apr 2007 11:06:24 -0400
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.icsalabs.com
In-reply-to: <8a9b1fe30704251500j4dd1dbecm88c1cbb16ac2c619@mail.gmail.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <eaf24a8a0704121448j8ff10b6oec0e810060779637@mail.gmail.com> <8a9b1fe30704251500j4dd1dbecm88c1cbb16ac2c619@mail.gmail.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
Not completely accurate.  Obviously there is the hardware differences between them (such as one being a module which can save rack space) and the other asa or pix is an appliance.  The main advantage of the fwsm is the throughput as these are directly connected to the backplane of the layer 3 switches.  Their are subtle other differences but this is the main one that I can think of off the top of my head without going to the cisco site. 

hope this helps
Kevin

On 4/25/07, Avishai Wool <yash@acm.org> wrote:
AFAIK the FWSM is essentially a PIX 7.x that is stuck inside a
catalyst switch chassis. and an ASA is a PIX 7.x that is
bundled with some other (non-firewall) security functions .

the configuration language was 99.9% compatible between the ASA
and the FWSM, at least as of PIX 7.0. I'm not sure if Cisco kept the
code-bases evolving in sync - there were a few months in which FWSM was
shipping but PIX 7.0 was not released yet...

In my opinion, the main differences are "form factor" and pricing. If
all you need
is a firewall then you don't care about the other things the ASA may do.
If you already have a Catalyst with an empty expansion bay - it may
be convenient to get a FWSM (e.g. less rack-space).

HTH,
  Avishai

On 4/13/07, Kimberly Fields <kimberlymfields@gmail.com> wrote:
> Can anyone tell me what, if any, are the differences between the Cisco ASA
> firewall features and the Cisco FWSM firewall features?
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
>


--
Avishai Wool, Ph.D.,      Cell: +972-52-333-0052
      Co-founder and Chief Technical Officer
               http://www.algosec.com
******* Firewall Management Made Smarter ******
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
<Prev in Thread] Current Thread [Next in Thread>