The physical ASA series is now almost dead. You could use a virtual ASA such as an ASAv30 on VMWare, Hyper-V or KVM (the smaller models don't have more capacity than an MX250). https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/datasheet-c78-733399.html The virtual ASAs are quite well priced. Otherwise I think you'll be looking at a Firepower box. Perhaps a Firepower 2110 or 2120 might be a good fit. https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html Note you will [almost certainly] also need a Firepower Virtual Management centre. Note that some of the more complex client VPN connectivity options require Cisco ISE. So you may need all three components to form a working solution in complex environments. https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/data_sheet_c78-656174.html#:~:text=The%20Cisco%20%C2%AE%20Identity%20Services,connections%20to%20the%20corporate%20network. Just to warn you - a Firepower solution will make your MX250 look cheap. It will make the MX450 look cheap.
... View more
