[jkdas]

Originally Posted by Samurai

For more than a year now, all our 3 offices are connected to each other via permanent VPN using Cisco ASA 5505 at each branch. It is working out very well, you could call me a happy customer. BTW, I learnt to configure it myself.

Thanks for all the support and guidance I received here.

Now I need one for another location in India. But I do not dare use the same vendor because of the above reason.

I need the basic version: ASA5505-BUN-K9 + smartnet support.

Is there a vendor in Bangalore from whom I can buy Cisco ASA 5505 quickly?

Try Datacraft; been doing business with them for sometime now.

[Rocky_Balboa]

I heard Microtek also stocks Cisco devices, Sigma Networks is another.

[Samurai]

Thanks guys, so I have 3 names, Datacraft, Microtek & Sigma Networks.

Do they really keep inventory? I am asking this because lot of vendors lie about their stock, take advance and then don't deliver. Currently I am undergoing a painful experience with a Polycom reseller who took 100% advance and not delivering. I'll post that story separately later if it doesn't get resolved soon.

Is there some company/shop in Bangalore where I can pay via CC/Cheque/DD and pickup this equipment?

[jassi]

^^ Samurai - Datacraft is reliable enough as they are a tier 1 partner. So are wipro and hcl comnet. There are also the tier 2 partners, but there are too many of them to name here.
Unfortunately the ASA is not a consumer product (unlike the linksys line of products) and hence cannot be picked up at stores yet :-)
One piece of info - lead times are higher these days due very high demand with sudden splurge of buyers coming out of recession so plan to order in advance!
Check with your partner tier1 or 2 if they have a spare/rental (they should foot the 4k per month rental cost for a spare 5505) while your order is being shipped.

[Samurai]

Originally Posted by jassi

Unfortunately the ASA is not a consumer product (unlike the linksys line of products) and hence cannot be picked up at stores yet :-)

Sigh! When will they start selling these basic products over the counter.

This often happens to me. My boss buys some product in US over the counter or online, likes it, and tells me to get the same in India. I say OK and try buying it...and BAM!

"We will give you a quote."

a week later

"Here is the quote, deliver within 8-10 weeks after receiving 100% advance."

Therefore, I mostly go with my local dealer who doesn't ask for 100% advance or any advance. Deliver takes time, but at least my money is not held up.

[jassi]

^^ Samurai - I meant the ASA is not a consumer product globally (not just india) - can be only bought from Cisco channel partners and not picked up at any store :-)

[Samurai]

Originally Posted by jassi

^^ Samurai - I meant the ASA is not a consumer product globally (not just india) - can be only bought from Cisco channel partners and not picked up at any store :-)

But I ordered it online for our US locations. It is available online: Cisco ASA5505 Hardware Firewalls and Adaptive Security Solutions.

[NetfreakBombay]

Two things:

1. With his much lead time (8 weeks), it might be easier to import. UPS can take care of customs + shipping etc in just 4 - 5 days. In case of IT equipment, customs duty is not that high.

2. If you have some time, you can look at Vyatta. Its open source router/firewall that can be deployed on standard PC hardware.

Its command line interface is same as Cisco, so the experience and Knowledge of Cisco is not wasted.

I deployed it as VPN + router solution for a IT development company that has 2 offices in US and 3 offices in India. Company is small and could not afford to spend too much money on infrastructure. With Vyatta, cost is 2 barebone PCs in each office + 8 port switch (or even hub).

It needs 2 PCs, so that these PCs are clustered and failure of cheap CPU/RAM does not mean connectivity loss for office.

[Samurai]

Yeah, I might consider importing it. I need to mate it with 5505 in other offices using permanent VPN. Want to stick with 5505 for now, keep it simple.

[jassi]

yeah maybe I was wrong - you really can buy anything online :-) just not in india because of custom rules!
But be careful, you get the support with the box, so that if things go wrong you can get help from Cisco

[Samurai]

Unbelievable! The Cisco ASA 5505 is out of stock worldwide. Nobody expects new stock for next two months.

Now, I need a firewall device to connect as IPSec VPN peer to three other Cisco ASA 5505 devices. Is there some competing product that can do this? Anything from Juniper?

[deepakchiniwal]

I guess the SSG140 or SSG20 should do the trick.

SSG 20 would just meet your requirement (going by Specs of ASA5505). SSG140 is more robust model compared to ASA series of Cisco.

SSG20 has only about 40Mbps thruput on 3DES IPSec VPN while the Cisco ASA 5505 has about 100 Mbps if that is one of your criteria.

Plus, setting up IPSec Tunnels, troubleshooting on Juniper's device is breeze. In typical TBHP language 0-100 is flat 6 secs

The other best part of SSG20 is you can opt for the Wireless module.

[Samurai]

Looks like even SSG5 should do the trick considering the specs. Even SSG5 is much expensive than the ASA 5505.

The Juniper SSG5 should work with ASA 5505 as IPSec VPN peer I guess. Is that right?

If there is no other choice, I'll take the SSG5.

[Elito11]

U may try FortiGate or even Cyberoam.

[deepakchiniwal]

Originally Posted by Samurai

Looks like even SSG5 should do the trick considering the specs. Even SSG5 is much expensive than the ASA 5505.

The Juniper SSG5 should work with ASA 5505 as IPSec VPN peer I guess. Is that right?

If there is no other choice, I'll take the SSG5.

Yes SSG5 works with ASA 5505 as IPSec VPN Peer.

You will never regret once you Juniper devices, considering the fact in ease of use.

There are other cheap firewall's available, but SSG5 is my choice.