Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are looking at deploying a Cisco ASA 5520-I am looking at the security contexts feature, and was wondering if anyone has deployed their ASA in this way, and how it is working out for them.

Have you encountered anything that you wished you would have known before you deployed it?

Have you noticed any performance issues?

Is there anybody actually using this feature?


share|improve this question
up vote 1 down vote accepted

Yep, we use them with contexts (and the ACE modules for Cat65's) and they're great, not easy to use to be honest but they're a powerful piece of kit and I would strongly urge you to get someone on a training course for them before use. They're fast but licensing costs (for the ACEs) can start to rack up if you're pushing a lot of data through them.

We're certainly happy with them, one hint I'd suggest is that you map out your requirements in something like Visio and keep track of everything in a big spreadsheet - it can be easy to lose track of how everything chains together.

Good luck.

share|improve this answer
Thanks for the info & ideas- – Josh Brower Mar 8 '10 at 13:41

Also remember that if you do security contexts on your ASA, you lose the ability to terminate a VPN on that appliance.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.