Description
Technical Specifications:
Primary Components:
- Cisco ASA 5500 Series Firewall Edition – Provides a wide range of security and networking services at locations across the enterprise.
- Management – Cisco Security Manager provides an enterprise-grade management infrastructure for large-scale deployments of Cisco security technologies.
- Monitoring – Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS) provides real-time monitoring and incident response capabilities, enabling businesses to get the most value from the security and networking services of the Cisco ASA 5500 Series Firewall Edition.
| Cisco ASA 5500 Series Model/License | |||||
|---|---|---|---|---|---|
| Cisco ASA 5505 Base / Security Plus | Cisco ASA 5510 Base / Security Plus | Cisco ASA 5520 | Cisco ASA 5540 | Cisco ASA 5550 | |
| Network Location | Small Business, Branch Office, Enterprise Teleworker | Internet Edge | Internet Edge | Internet Edge | Internet Edge, Campus |
| Performance Summary | |||||
| Maximum Firewall throughput | 150 Mbps | 300 Mbps | 450 Mbps | 650 Mbps | 1.2 Gbps |
| Maximum Firewall Connections | 10,000 / 25,000 | 50,000 / 130,000 | 280,000 | 400,000 | 650,000 |
| Maximum Firewall Connections/Second | 4000 | 9000 | 12,000 | 25,000 | 36,000 |
| Packets Per Second (64 byte) | 85,000 | 190,000 | 320,000 | 500,000 | 600,000 |
| Maximum 3DES/AES VPN Throughput | 100 Mbps | 170 Mbps | 225 Mbps | 325 Mbps | 425 Mbps |
| Maximum Site-to-Site and IPsec IKEv1 Client VPN User Sessions | 10 /25 | 250 | 750 | 5000 | 5000 |
| Maximum AnyConnect or Clientless VPN User Sessions | 25 | 250 | 750 | 2500 | 5000 |
| Bundled SSL VPN User Session | 2 | 2 | 2 | 2 | 2 |
| Technical Summary | |||||
| Memory | 512 MB | 1 GB | 2 GB | 2 GB | 4 GB |
| Minimum System Flash | 128 MB | 256 MB | 256 MB | 256 MB | 256 MB |
| Integrated Ports | 8 port 10/100 switch with 2 Power over Ethernet (PoE) ports | 5-10/100 / 2-10/100/1000, 3-10/100+4-10/100/1000, 4 SFP (with 4GE SSM) | 4-10/100/1000, 1-10/100 +4-10/100/1000, 4 SFP (with 4GE SSM) | 4-10/100/1000, 1-10/100 +4-10/100/1000, 4 SFP (with 4GE SSM) | 8-10/100/1000, 4-SFP, 1-10/100 |
| Maximum Virtual Interfaces (VLANs) | 3 (trunking disabled) / 20 (trunking enabled) | 50 / 100 | 150 | 200 | 400 |
| Expansion Capabilities | |||||
| SSC/SSM/ICs Expansion | 1-SSC | 1-SSM | 1-SSM | 1-SSM | Not available |
| SSC/SSM/ICs Supported | AIP, SSC | CSC SSM, AIP SSM, 4GE SSM | CSC SSM, AIP SSM, 4GE SSM | CSC SSM, AIP SSM, 4GE SSM | Not available |
| Intrusion Prevention | Yes (with AIP SSC) | Yes (with AIP SSM) | Yes (with AIP SSM) | Yes (with AIP SSM) | Not available |
| Concurrent Threat Mitigation Throughput (Mbps) (Firewall + IPS Services) | 75 (with AIP SSC-5) | 150 (with AIP SSM-10) 300 (with AIP SSM-20) | 225 (with AIP SSM-10) 375 (with AIP SSM-20) 450 (with AIP SSM-40) | 500 (wth AIP SSM-20) 650 (with AIP SSM-40) | Not available |
| Content Security (Anti-virus, Anti-Spyware, File Blocking) | Not available | Yes (with CSC SSM) | Yes (with CSC SSM) | Yes (with CSC SSM) | Not available |
| Maximum Number of Users for Anti-virus, Anti-spyware, File Blocking (CSC SSM only) | Not available | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | 500 (CSC-SSM-10) 1000 (CSC-SSM-20) | Not available |
| Content Security Plus License features | Not available | Anti-spam, anti-phishing, URL filtering | Anti-spam, anti-phishing, URL filtering | Anti-spam, anti-phishing, URL filtering | Not available |
| Features | |||||
| Cisco Adaptive Security Appliance Software Version (latest) | 8.4 | 8.4 | 8.4 | 8.4 | 8.4 |
| Application-layer Firewall Services | Yes | Yes | Yes | Yes | Yes |
| Layer 2 Transparent Firewalling | Yes | Yes | Yes | Yes | Yes |
| Security Contexts (included/maximum)1 | 0/0 | 0/0 / 2/5 | 2/20 | 2/50 | 2/100 |
| GTP/GPRS Inspection1 | Not available | Not available | Yes | Yes | Yes |
| High-availability Support2 | Not supported Stateless A/S | Not supported A/A and A/S | A/A and A/S | A/A and A/S | A/A and A/S |
| SSL and IPsec VPN Services | Yes | Yes | Yes | Yes | Yes |
| VPN Clustering and Load Balancing | Not available | Not available / Yes | Yes | Yes | Yes |
| Advanced Endpoint Assessment1 | Yes | Yes | Yes | Yes | Yes |
Tag: cisco
