Migration from Pix 515E to ASA

[dalew430]

We are looking to replace our PIX 515E with an ASA 5500 series router. We'd like to replace it with it with a 5520, but I can't seem to determine if it supports dual WAN cards for failover/load balancing purposes. Is it possible to upgrade from the 515E to an ASA5520? We don't have a Cisco support contract that I know of, so we won't be able to take advantage of PIX upgrade to 7.0 to make migration to the ASA a little easier. Also we have a VPN setup on the PIX, so I need to know if I'm going to have to use a different VPN client software or can I continue to use the one's I have for the PIX515E? Any assistance would be greatly appreciated.


Cisco PIX Firewall Version 6.3(3)
Cisco PIX Device Manager Version 3.0(1)

Compiled on Wed 13-Aug-03 13:55 by morlee

PIX01 up 14 days 12 hours

Hardware: PIX-515E, 32 MB RAM, CPU Pentium II 433 MHz
Flash E28F128J3 @ 0x300, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: ethernet0: address is 0011.5c06.c556, irq 10
1: ethernet1: address is 0011.5c06.c557, irq 11
2: ethernet2: address is 0002.b3ef.7024, irq 11
Licensed Features:
Failover: Disabled
VPN-DES: Enabled
VPN-3DES-AES: Disabled
Maximum Physical Interfaces: 3
Maximum Interfaces: 5
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
IKE peers: Unlimited

This PIX has a Restricted (R) license.

Serial Number: 808231521 (0x302ca261)
Running Activation Key: 0x835e5912 0x688c1160 0xd89f7653 0x63d92bbe
Configuration last modified by enable_15 at 10:10:25.849 UTC Thu Dec 3 2009

 

[Supergrrover]

They will do failover (with 2 of them) but no load balancing. The vpn software will work but you should use the newest version.
Use this as an opportunity to tighten up your config for security and your current needs.


Brent
Systems Engineer / Consultant
CCNP, CCSP