Hi, The UTM can absolutley replace the ASA - in fact it replaced mine without any problems. If you have multiple public IP addresses they are easily configured on the UTM and if you have any VLANs on the switches etc. then that's also fairly straight forward to setup. To help, my original setup was: WAN -> Cisco ASA 5505 -> Cisco ISR 2801 -> Cisco Catalyst Switch with VLANs -> Network Devices. With the UTM I was able to eliminate the ASA and ISR and keep the switch in place with the VLAN configuration and have it setup as WAN -> UTM -> Switch -> Network Devices I personally have my default gateway set to my Switch (which is capable of doing routing) and then have the default route on the switch going to the UTM. I found by doing this if the UTM wen't down then my routing wasn't hosed and I'm still able to access everything internally. I may be doing that incorrectly but it's working great for me. Let me know if you have any specific questions regarding the replacement of the ASA and I'll be happy to help where I can!
↧