CISCO ASA 5510 or Allied AT-AR-770S

Question

Cisco

I ask the hall for help, as they say, in the choice indicated in the title.
Introductory:
There is an office for 200 machines, 2 Internet channels for 100Mbit each.
Channel 1 is used to access the Internet using freebsd + pf (2 identical machines with CARP enabled for fault tolerance, since the servers have been in continuous operation since 2004. It would be time to upgrade already, and at the same time reduce power consumption)
Channel 2 for external servers (99.999% ftp-data) (for video sharing)
Task:
Remove machines from the freebsd infrastructure.
Combine both external channels into one device in order to implement failover in case one of the channels fails.
Along the way, organize a minimum level of protection. (Now BSD does this again with pf)

What does not suit the ASA is that the presence of gigabit ports dramatically increases the cost. The possibility of implementing failover connections is not entirely clear. The default version of the hardware is limited to the 10th VLAN (in my case, 26 is used throughout the network, only 5 reaches the machines that go outside, but there are no guarantees that it will remain so). And according to old memory: without a subscription, you will receive OS updates. Maybe now the situation is different, it's just that since the 36th series I somehow fell out of love with cisco.

What does not suit Allieda: first of all, the lack of distribution among Russian speakers, hence the scarcity of manuals (in Russian, of course). (On the other hand, the infrastructure already has their hardware, and in general the cisco-style command line.). And I actually have nothing more to write down as cons.

In general, as always, everything depends on money, in my opinion, both pieces of iron are suitable for my tasks, only with a difference of 2k in price.

Maybe you have a different point of view? Please comment with reason.

Answer 1

I would look towards either supermicro.nl/products/system/1U/5017/SYS-5017A-EP.cfm + Linux/FreeBSD or routerboard.com/CCR1036-12G-4S

Answer 2

I see no reason to change a more stable solution to another

Answer 3

the presence of gigabit ports dramatically increases the cost.

Not the presence of gigabit ports, but the presence of the "Cisco" nameplate :)

The possibility of implementing failover connections is not entirely clear.

Roughly speaking: in front of the ASA there is a switch into which internal machines are plugged, and behind the ASA there is a switch into which Internet channels are plugged. Aces work in active / standby: as soon as the first one dies, the second one instantly grabs the same addresses and continues to route without losing connections.

without a subscription of figs you will receive OS updates.

Officially - figs (but usually smartnet - only 10% of the cost of a piece of iron per year, and sometimes it's worth it). Unofficially - torrents, no problem. In the days of the 3600s, this was all the more a problem.

only with a difference of 2k ye in price.

I look at the Yandex.market. Both cost about the same. Tsiska is even a little cheaper.
But now it makes no sense to take 5510, it is very outdated and will most likely become EOL soon. There is 5512-X for the same money.

Channel 2 for external servers (99.999% ftp-data) (for video sharing)

"Before"? That is it will be possible to differentiate access at the level of the routing table? Otherwise, the task becomes a little more difficult.

Answer 4

You can also look at the Juniper SRX line - there are no problems with importing into the Russian Federation, because. they are imported with an image without encryption. There is support for clustering (you can assemble 2 pieces of iron into a failover cluster). A support as well as at tsisko, only at purchase of support. On torrents you can find the latest versions of JunOS. There is a lot of documentation on the site, there is a good forum (albeit in English).

Answer 5

Allied saves on LEDs, so it will be a good energy saving!))