Cisco have stopped selling the ASA (Adaptive Security Appliance) 5500 firewalls – End of Life (EoL) and End of Support (EoS) dates have been announced for all ASA5500 models.
The Cisco ASA became one of the most widely used Firewall/VPN solutions for small to medium businesses, but they are now considered legacy and end of life.
We compare the Cisco Firewall options for customers looking to continue with the Cisco Firewall as their Security Solution.
BUYING A CISCO FIREWALL?
Get Guidance and Prices
ASA5500 Replacement Options
Replace your ASA 5500 with an FPR NGFW
The ASA5500 with Firepower Services has now reached End of Life and the Cisco recommended replacement is the FPR1000 or the FPR2100.
The following table compares performance of ASA models running the IPS and Application Visibility Firepower Services with Cisco FPR devices in the same configuration.
The recommendations are based on throughput, number and types of interface and spare capacity to allow for some future growth.
Note that the Cisco FPR NGFW includes Application Visibility Control as standard, but IPS requires a subscription license.
The Cisco FPR1000 Firewall is available in two versions, the hardware is identical and the only difference is the image that is factory installed. The FPR1000-ASA models run the latest ASA Firewall Image, and the FPR1000-NGFW models run the FTD Threat Defense NGFW image.
Note that both versions can be reset to run as either an ASA or as an NGFW.
The FPR1000 hardware is available from Cisco Refresh at lower prices than new, the product is identical to the new version and benefits from a standard Cisco warranty and support eligibility.
Savings can sometimes be made if you are willing and able to re-image the FPR1000-ASA version to be an FPR1000-NGFW (Smart Net is required for software downloads).
The Cisco FPR1000 NGFW Firewalls run the Cisco Firepower Threat Defense software now called Cisco Secure Firewall Threat Defense (FTD).
Features
FPR1010-NGFW
FPR1120-NGFW
FPR1140-NGFW
FPR1150-NGFW
Throughput FW/AVC/IPS
650 Mbps
1.5 Gbps
2.2 Gbps
3 Gbps
IPsec VPN
300 Mbps
1 Gbps
1.2 Gbps
1.4 Gbps
Connections
100k
200k
400k
600k
1GE RJ45
6
8
8
8
1GE PoE+ RJ45
2
1GE SFP
4
4
2
10GE SFP+
2
Price New
$731.00
$2,439.10
$3,858.99
$7,362.72
Cisco Refresh Price
$521.40
$1,600.43
$2,667.12
$7,196.81
Cisco Firepower FPR2100 ASA Firewall Datasheet
The Cisco FPR2100 Firewall is available in two versions, the hardware is identical and the only difference is the image that is factory installed. The FPR2100-ASA models run the latest ASA Firewall Image, and the FPR2100-NGFW models run the FTD Threat Defense NGFW image.
Note that both versions can be reset to run as either an ASA or as an NGFW.
The FPR2100 hardware is available from Cisco Refresh at lower prices than new, the product is identical to the new version and benefits from a standard Cisco warranty and support eligibility.
Savings can sometimes be made if you are willing and able to re-image the FPR2100-ASA version to be an FPR2100-NGFW (Smart Net is required for software downloads).