Description
Technical Specifications:
Primary Components:
- Cisco ASA 5500 Series Firewall Edition – Provides a wide range of security and networking services at locations across the enterprise.
- Management – Cisco Security Manager provides an enterprise-grade management infrastructure for large-scale deployments of Cisco security technologies.
- Monitoring – Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS) provides real-time monitoring and incident response capabilities, enabling businesses to get the most value from the security and networking services of the Cisco ASA 5500 Series Firewall Edition.
Cisco ASA 5500 Series Model/License | |||||
---|---|---|---|---|---|
Cisco ASA 5505 Base / Security Plus | Cisco ASA 5510 Base / Security Plus | Cisco ASA 5520 | Cisco ASA 5540 | Cisco ASA 5550 | |
Network Location | Small Business, Branch Office, Enterprise Teleworker | Internet Edge | Internet Edge | Internet Edge | Internet Edge, Campus |
Performance Summary | |||||
Maximum Firewall throughput | 150 Mbps | 300 Mbps | 450 Mbps | 650 Mbps | 1.2 Gbps |
Maximum Firewall Connections | 10,000 / 25,000 | 50,000 / 130,000 | 280,000 | 400,000 | 650,000 |
Maximum Firewall Connections/Second | 4000 | 9000 | 12,000 | 25,000 | 36,000 |
Packets Per Second (64 byte) | 85,000 | 190,000 | 320,000 | 500,000 | 600,000 |
Maximum 3DES/AES VPN Throughput | 100 Mbps | 170 Mbps | 225 Mbps | 325 Mbps | 425 Mbps |
Maximum Site-to-Site and IPsec IKEv1 Client VPN User Sessions | 10 /25 | 250 | 750 | 5000 | 5000 |
Maximum AnyConnect or Clientless VPN User Sessions | 25 | 250 | 750 | 2500 | 5000 |
Bundled SSL VPN User Session | 2 | 2 | 2 | 2 | 2 |
Technical Summary | |||||
Memory | 512 MB | 1 GB | 2 GB | 2 GB | 4 GB |
Minimum System Flash | 128 MB | 256 MB | 256 MB | 256 MB | 256 MB |
Integrated Ports | 8 port 10/100 switch with 2 Power over Ethernet (PoE) ports | 5-10/100 / 2-10/100/1000, 3-10/100+4-10/100/1000, 4 SFP (with 4GE SSM) | 4-10/100/1000, 1-10/100 +4-10/100/1000, 4 SFP (with 4GE SSM) | 4-10/100/1000, 1-10/100 +4-10/100/1000, 4 SFP (with 4GE SSM) | 8-10/100/1000, 4-SFP, 1-10/100 |
Maximum Virtual Interfaces (VLANs) | 3 (trunking disabled) / 20 (trunking enabled) | 50 / 100 | 150 | 200 | 400 |
Expansion Capabilities | |||||
SSC/SSM/ICs Expansion | 1-SSC | 1-SSM | 1-SSM | 1-SSM | Not available |
SSC/SSM/ICs Supported | AIP, SSC | CSC SSM, AIP SSM, 4GE SSM | CSC SSM, AIP SSM, 4GE SSM | CSC SSM, AIP SSM, 4GE SSM | Not available |
Intrusion Prevention | Yes (with AIP SSC) | Yes (with AIP SSM) | Yes (with AIP SSM) | Yes (with AIP SSM) | Not available |
Concurrent Threat Mitigation Throughput (Mbps) (Firewall + IPS Services) | 75 (with AIP SSC-5) | 150 (with AIP SSM-10) 300 (with AIP SSM-20) | 225 (with AIP SSM-10) 375 (with AIP SSM-20) 450 (with AIP SSM-40) | 500 (wth AIP SSM-20) 650 (with AIP SSM-40) | Not available |
Content Security (Anti-virus, Anti-Spyware, File Blocking) | Not available | Yes (with CSC SSM) | Yes (with CSC SSM) | Yes (with CSC SSM) | Not available |
Maximum Number of Users for Anti-virus, Anti-spyware, File Blocking (CSC SSM only) | Not available | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | Not available |
Content Security Plus License features | Not available | Anti-spam, anti-phishing, URL filtering | Anti-spam, anti-phishing, URL filtering | Anti-spam, anti-phishing, URL filtering | Not available |
Features | |||||
Cisco Adaptive Security Appliance Software Version (latest) | 8.4 | 8.4 | 8.4 | 8.4 | 8.4 |
Application-layer Firewall Services | Yes | Yes | Yes | Yes | Yes |
Layer 2 Transparent Firewalling | Yes | Yes | Yes | Yes | Yes |
Security Contexts (included/maximum)1 | 0/0 | 0/0 / 2/5 | 2/20 | 2/50 | 2/100 |
GTP/GPRS Inspection1 | Not available | Not available | Yes | Yes | Yes |
High-availability Support2 | Not supported Stateless A/S | Not supported A/A and A/S | A/A and A/S | A/A and A/S | A/A and A/S |
SSL and IPsec VPN Services | Yes | Yes | Yes | Yes | Yes |
VPN Clustering and Load Balancing | Not available | Not available / Yes | Yes | Yes | Yes |
Advanced Endpoint Assessment1 | Yes | Yes | Yes | Yes | Yes |
Tag: cisco