ASA 5505

N

nitrobass24

[H]ard|DCer of the Month - December 2009
Joined
Apr 7, 2006
Messages
10,466
Thinking of buying a 5505 to play with.
Found one on CL for $250 its the basic license.

Anything I should be worried about? Things to ask?
 
I've seen 50 user license asas brand new for $300-350 depending on the vendor. I just snagged one for $350 myself for a work lab. $250 is meh.

I got a 50 user one myself used fror free from a place that dumped it cause it stopped working. 10 min after I get it, Ireseat the flash card its working again.
 
How does the license work. Is itjust an ios you can upgrade to get more connections?
 
Reminds me... I need to configure my ASA5505. Haven't been motivated since my Apple Base Station is doing a good job.
 
The license is an activation key code that you get from Cisco. If you have a 10-user license you can upgrade it to a 50 or unlimited license. You buy the license, register it and then you get a key to paste into the firewall.
 
Captain Colonoscopy said:
The license is an activation key code that you get from Cisco. If you have a 10-user license you can upgrade it to a 50 or unlimited license. You buy the license, register it and then you get a key to paste into the firewall.
Click to expand...

Also another note, you can enable other features into the device as well with different activation codes. More SSL vpn connections things/Anyconnect mobile etc.
 
Get it - you can learn a lot with a 5505.

You'll need a memory upgrade to learn the latest code though...
 
i made the mistake of buyin a 10 user license version thinking it was VPN's and not connections period. ended up forking over for an unlimited user one in the end XD so make sure you get like the 50 user version if anything.
 
moose517 said:
i made the mistake of buyin a 10 user license version thinking it was VPN's and not connections period. ended up forking over for an unlimited user one in the end XD so make sure you get like the 50 user version if anything.
Click to expand...

Wait, what?
 
Jay_oasis said:
do ASAs see VMs are 1 license or does it see each MAC?
Click to expand...

ASA sees concurrent connections. If you have a VM server with five VMs and they all try to go to the internet at once that is seen as six connections. And it stays in the table, too. If you have a printer that gets time via ntp on an external server then that counts against the user count as well. For this reason I don't sell the 10-user ASAs anymore. I've had too many clients with seven PCs and a server call and say one computer can't get out to the internet because their printers were pulling time or their switch/APs were configured for network time, too.
 
Captain Colonoscopy said:
ASA sees concurrent connections. If you have a VM server with five VMs and they all try to go to the internet at once that is seen as six connections. And it stays in the table, too. If you have a printer that gets time via ntp on an external server then that counts against the user count as well. For this reason I don't sell the 10-user ASAs anymore. I've had too many clients with seven PCs and a server call and say one computer can't get out to the internet because their printers were pulling time or their switch/APs were configured for network time, too.
Click to expand...

What if you put a router between your network and the ASA doing some kind of NAT?
 
AMD_Gamer said:
So you commend learning the CLI for them or the ASDM?

My work uses an ASA 5510 but I can't really do anything with it.
Click to expand...

Depends who you talk to. I use the CLI, but a lot of the high-level security guys I know are moving to ASDM. They say it's better than the CLI with 8.3+. I may eventually use ASDM, but for now I'm sticking with the CLI.
 
I use both the CLI and ASDM. Sometimes ASDM names things in a weird way, so I take that syntax and rename it to something more understandable via the CLI. Other things are simply much easier with ASDM, like certificate requests and installing certs.
 
ASDM has come a long way. I find I use it more and more with our 5510s
 
Please note the number of vlans supported by the 5505 is limited to I think 3 depending on the license. You have to do a "no forward" on the 5505 in order to even use 3. Not sure if you would be working a lot with vlans or not but just though I'd point that out and add some value to the conversation.

If you look up clans for 5505 this information should come right up.
 
Ended up picking it up for $200, might upgrade to SecPlus License in the future. Ill be setting it sometime this week, so expect questions. :)
 
You must log in or register to reply here.
Back
Top