Cisco → Re: [Info] Cisco ASA5505

Base vs SECPLUS is also compared here as well, but yes, in
a nutshell the DMZ "VLAN" can talk with outside [u]OR[/u] inside but not both.

I've said it before, and I'll repeat it again -- while ASA was a badly needed upgrade to the PIX line, Cisco SERIOUSLY
shot themselves in the foot with the 'everything as a licence' model.

Regards

And this is why I buy Cisco less today--it's kind of nuts and I feel like I'm licensing something from Microsoft/need to be a licensing expert just to get expected functionality.

Yes, they've gotten way overboard with the licensing crap. However, with the ASA base vs. secplus... you pretty much know what you need before you start shopping. For most purposes, the "DMZ-lite" mode is acceptable. So DMZ hosts cannot initiate contact with an inside (or outside) host, just plan ahead.

Also, if you're planning an enterprise network, you likely aren't doing it with a 5505. (and today, would be looking at things not made by Cisco.)