"I was then able to copy off that text-based configuration and
run it through sed to do a search and replace on IP addresses and
network definitions, and within a minute or two I had a complete
configuration for the other ASA5520s. All I had to do to get them
running was log into them, copy over the right firmware and their
configuration file, and reboot them. By any definition, that's a
highly simple and effective method, and one possible due to the
simplicity of the CLI and the text-based configs.
"But then I came across the Cisco SA520. While the ASA5520s are
full-blown ASA appliances, the SA520 is dubbed a "Small Business
Pro security appliance." It was for one site that didn't need the
horsepower of the ASA5520, and the specs of the SA520 fell into
line with the planned service to that site.
"The SA520 doesn't have a CLI, or even a serial console for that
matter. All it has is a Web UI.
"So rather than being able to configure this device in a matter
of a minute or two as I had with its bigger brothers, I had to wade
through the Web UI to build essentially the same configuration"