The ASA's have considerably more configuration flexibility.  They can do tricky site to site VPNs and handle complex user VPN requirements.  They can also do complex NAT configurations.   The MX is very basic at all of these.  As long as your ASA configuration is simple you can replace them with MX. ... View more