PIX to ASA

[Reconrider]

Hi All,

I need to swap out a PIX515 with an ASA5510. The ASA will take the place of the EoL PIX as an Internet Edge FW with an MS ISA 2006 server sitting behind it. Currently the PIX terminates Remote VPN connections (PPTP) which the ASA will now pass through and the ISA will now terminate them.

Besides moving the VPN termination point to the ISA, can anyone see any other issue that I may experience with the swap out?

Manythanks

 

[unclerico]

Why not move to SSL VPN??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Reconrider]

Hi unclerico, would be nice but management do not want any changes for the remote users. Also, they do not want to pay for the additional SSL licence.