Pros: Fast, and reliable equipment. These units to everything every you could ever need a firewall to do.

Cons: doesn't make coffee.

Other Thoughts: I've seen many reviews on newegg from people that buy expensive business class firewalls and complain when they open it up and doesn't auto configure itself like their home routers do. Ignore any reviews that say Cisco products didn't work out of the box. 99.999% of the time its a person who shouldn't be touching Cisco products in the first place and has no idea what they are doing.

Pros: Fast

Cons: Ships Broken

Other Thoughts: You need to Type:

ssl encryption 3des-sha1 des-sha1 rc4-md5 aes128-sha1 aes256-sha1

To Fix is so that you can access the ASDM

Pros: Reliable, fast, efficient, and backed by Cisco TAC. I work for a VAR and have deployed numerous of these units without any problems (that weren't resolved by an IOS change). We currently have two of these units in a datacenter in Las Vegas providing active/standby redundancy for all of our customer-facing applications. In addition to providing just the basic firewalling you would expect from a zone based firewall, the IPS feature set in addition to features like IP Phone Proxy and Anyconnect make this thing a must-have for us.

Cons: Ran into a minor bug with SIP, but that was resolved by upgrading the IOS. Also had a minor issue with Anyconnect where the connection would periodically drop on Linux clients, but TAC was nice enough to provide us with a Linux beta client which resolved that issue completely (and is now available via cisco.com).

Other Thoughts: Contrary to the previous poster, I've had nothing but great performance and reliability out of these units. I don't know why anyone would expect an enterprise-class firewall system to come out of the box with a pre-configured template and a web GUI, but hey... I guess some people just want to watch the world burn. We bought our unit with CISCO SmartNet support as well (which has proven itself to be invaluable in a pinch).

Current uptime on our failover cluster is 298 days. Not bad at all IMHO.

Pros: Newegg's spectacular RMA policy.

Cons: Cisco purposefully ships these disabled and non-functional. They do not tell you how to make it functional anywhere. You must learn how by certification (paying them for the honor, of course), or be forced into a paid contract with their tech support, who will whisper you the magic spell to unlock your otherwise inoperable device.

This is an immoral, abusive business model. It is the equivalent of selling a man dying of thirst a bottle of water for $1, then offering to remove your ingeniously padlocked water bottle cap for $10,000.

I probably shouldn't have made that analogy -- Teams of Cisco suits are probably now running the numbers for setting up new bottling plants in India.