Cisco Adaptive Security Appliance (ASA) software is the core OS for the ASA suite. It provides firewall functionality, as well as integration with context-specific Cisco security modules. It is scaled for enterprise-level traffic and connections.
N/A
Cisco Catalyst Switches
Score 9.0 out of 10
N/A
Cisco's Catalyst is one of that company's brand of network switches.
Our Palo Altos and Cisco ASAs are pretty comparable. They both seem to work well when used in an HA pair. They can both do IP/Port based ACLs. But the Palos also have APP-ID which helps to make sure that the traffic passing through your firewall is the type of traffic …
We evaluated other Cisco security devices and other vendors, but chose the Cisco ASA due to it's price point and compatibility. While Fortinet and Palo Alto are leaders in the field, we found that for the price, the features we needed were fully satisfied by the ASA. We …
Cisco ASA has good performance and capabilities for the most of scenarios. However other brands are good only in specific capabilities. Cisco support is the best compared (in my open cases experience) compared with other brands support.
Cisco ASA's are great for internal network connected access between a firewall and the central management server. And, for complex networks where high security requirements with overly strict compliance are necessary. For networks with limited connectivity to the core or for poor network connectivity these are not the best solution. There are other more stand-alone firewall's that do this better. These firewall's are a little more complex to set up to start with so significant knowledge of these devices is required to set them up and ensure they are best practice installed.
So in every scenario where you have to take one port and create, make it so that you can have more devices connected. So there will be like in a normal office area where you have an internet connection and you have to have 40 or 20 clients connected. That's where definitely Catalyst Switches becomes a very important part of this. The whole thing, scenarios where it's not very usable, I can't really see a scenario where you wouldn't be needing a switch to. There would be a very unlikely scenario because mostly you would need to connect more than one device to a router or something like that. So you would need to have a switch scenario I would say. Then it would be in some sort of scenario where you only had a need to have a directly connection to a router or something else where you wouldn't need to have more ports. So like a peer to peer connection or something like that. But I can't really see any other scenario where wouldn't you wouldn't be needing a switch.
I think the switch is a fast switch. What we also admire about it is the enhanced power over ethernet functionality. It has higher power levels to be used for wireless, for other products that use the power over ethernet, the quick uplinks, 10 gig uplinks, the possibility to run other applications on it, like a thousand eyes clients, and so on.
To be honest there has been now great products out in the market compared to Cisco ASA. I beleieve Cisco has to do a lot of improvement in this area. The other defeiniete factors is the cost when it comes to renewals which is always a premium on Cisco products
They are consistently reliable and this switch in particular is a very affordable solution. We can place the Cisco Catalyst 1000 Series Switches gear in areas that we normally would not place a switch because it is affordable enough to make it justifiable. And because it is a reliable solution, we are confident it will continue to provide service over the long haul.
The usability will feel natural to frequent Cisco users and a bit harder to navigate if you're new to the system. If you're limited to a small rack, maybe even in a not climate controlled environment the fan-less models with less energy consumption are a pro. With PoE you can deploy your network hardware anywhere you have a network socket: Thin Clients, APs, Sensors, you name it. The integrated power monitoring tells you how much power each client consumes and how much you have left.
I generally have not noticed the outages, however since it's a machine it can malfunction, we need to implement the firewall infrastructure in such a way that it is highly available with device failure, region failure etc. Else any solution will be having the issues if they are not build with resiliency.
We have had very few unplanned outages with all of our Cisco Catalyst products. The biggest issue I have seen is when a device has been powered on for a very long time and it gets powered off and reused later. Sometimes, the switch will not come back up. In most cases, these are switches that are way past end of life. I can't say we have really seen any other issues with the availability of the Catalyst family of switches
No, the packets flow. Sometimes you will see collisions and broadcast storms can happen which will slow performance but that can be fixed and the packets will flow.
The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.
So far we haven't had very many support issues with our Catalyst switches. When we have had issues TAC is always a pleasure to work with. They're prompt, knowledgeable, and take ownership of the case from open to close. Also, this isn't attributed to Cisco support directly. But because they are so widely known and have such a great market share you can find a solution to almost any issue with a quick internet search.
I prefer in person training. For me I understand things and the ability to ask someone helps. This particular training was a large class and it was a bit busy. However, I do prefer in person training to online. I have taken many online courses, and while they do offer a lot more info at an affordable price, there is sometimes a place for the personal touch.
It was quite a good one, how ever requires an expertise to deploy hence the SMB segment would be finding it difficult to implement this product. The one good reason is that there are lot of ASA certified engineers in compared to the other certified engineers. Hence this resembles positively on the deployment as you have quite a lot of experienced engineer on your deployment
We upgraded from an older catalyst model to a newer one. The implementation was pretty much seamless as the newer switches supported all the features as the old ones. These features included OSPF, HSRP, MPLS, LDP, MP-BGP, etc. One issue we say with the newer switches was that the buffers needed to be tuned. The default settings were dropping packets to a slower link. Once we change the 'qos softmax' command settings, we were able to resolve that issue.
We were using [pfSense] before in our environment but we regularly facing difficulties over it due to software bugs & downtime. After implementing Cisco ASA, it resolved our availability issue & provides us a reliable solution with the best security features & easy to understand GUI.
If I were to compare the Catalyst to the Meraki, I do feel more secure about the Catalyst, as Meraki was not originally a cisco product and was acquired. So, from the point of security and dependability, the Catalyst is a winner.
The product line is very complete and flexible. Supporting anything from small to larger modular solutions. Need PoE? Need 25Gb or faster fiber? Catalyst has you covered in all areas we can think of. Compact form factor? Industrial use? Cisco Catalyst has something that fits any scenario. And we can expect the same features, configuration and integrations to work no matter what.
