Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is a Cisco ASA 5505 powerful / capable enough to replace a Cisco PIX 503 ?

The PIX runs about 10 site to site VPN's and 40+ individual users on vpn.

share|improve this question
up vote 6 down vote accepted

Edit: Sorry, I was reading the tech specs wrong. You need a 5510 to support over 25 vpn clients. The Security Plus bundle and the Anyconnect Essentials bundle still apply.

Yes, it has more power under the bonnet than a PIX 506E.

You get exactly 10 ipsec licenses with the standard version, with Security Plus (bundle) you'll get 25 ipsec licenses, unlimited users and 2 SSL vpn peers.

If you need to support 40+ remote clients (not ipsec site to site) then a Anyconnect Essentials bundle is worth the money. AFAIK we got the 250-user license very cheap.

share|improve this answer

No, the 5505 only supports 25 VPN users.

Upon further investigation, it supports 25 ipsec clients, and 25 AnyConnect, but not sure if that's concurrent.

share|improve this answer
Anyconnect without SSL is ipsec, so I think it counts both. – pauska Jun 30 '11 at 20:18

The 5505 is fairly limited in the number of concurrent VPN connections it will accept. The 5510 can handle more, and probably everything your Pix could, but you'll have to pay for the licenses.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.