Cisco ASA and multiple VLANs

Solution 1:

For you having Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). This means you are moving away from packet filtering with acls and moving to firewall zone based techniques in ASAs.

Create class-maps ,policy-maps and service-policies.

Network objects will make your life easy.

The trend in firewall technique is

packet filtering - packet inspection - ip inspect (stateful inspection) - Zonebasedfirewall

These techniques were made for it to be less confusing as the areas increase.

There is a book ,You might want to the read.

The accidental adminitrator -It really helped me.

Have a look at it and move from the acls in in two different directions.

With ASAs you should have no problem.

In the past ,I made 800 series ip inspect and ZBF ,then compared there advantages and they used the same technique in the ASAs moving away from packet filtering to advanced ip inspect.