Cisco ASA 5500 Series Adaptive Security Appliances

Document

Jul 2, 2009 7:50 AM
Jul 2nd, 2009

Introduction

Cisco ASA 5500 Series Adaptive Security Appliances integrate firewall, Unified Communications (voice/video) security, SSL and IPSec VPN, intrusion prevention (IPS), and content security services in a flexible, modular product. They are a key component of the Cisco Self-Defending Network. They provide intelligent threat defense and secure communications services that stop attacks before they impact the network.

.

Product Comparison

ASA

Model
Cisco

ASA

5505
Cisco

ASA

5510
Cisco

ASA

5520
Cisco

ASA

5540
Cisco

ASA

5550
Users/nodes10, 50, or unlimitedUnlimitedUnlimitedUnlimitedUnlimited
Firewall and types throughputUp to 150 MbpsUp to 300 MbpsUp to 450 MbpsUp to 650 MbpsUp to 1.2 Gbps
Concurrent threat mitigation throughput (firewall + IPS services)Not availableUp to 150 Mbps with
Intrusion Detection/SSM-AIP-10
Up to 300 Mbps with
Intrusion Detection/SSM-AIP-20
Up to 225 Mbps withIntrusion Detection/SSM-AIP-10
Up to 375 Mbps withIntrusion Detection/SSM-AIP-20
Up to 450 Mbps withIntrusion Detection/SSM-AIP-20Not available
3DES/AES VPN throughputUp to 100 MbpsUp to 170 MbpsUp to 225 MbpsUp to 325 MbpsUp to 425 Mbps
IPSec VPN peers10; 25*25075050005000
SSL VPN peers* (included/maximum)2/252/2502/7502/25002/5000
Concurrent sessions10,000; 25,000*50,000; 130,000*280,000400,000650,000
New sessions/second30006000900020,00028,000
Integrated network ports8-port Fast Ethernet switch (including 2 PoE ports)3 Fast Ethernet + 1 management port; 5 Fast Ethernet ports*4 Gigabit Ethernet, 1 Fast Ethernet4 Gigabit Ethernet, 1 Fast Ethernet8 Gigabit Ethernet, 4 SFP Fiber, 1 Fast Ethernet
Virtual interfaces (VLANs)3 (no trunking support) / 20 (with trunking support)*50 /100*150200250
Security contexts (included/maximum)0/00/0 (Base); 2/5 (Security Plus)2/202/502/50
High availabilityNot supported; stateless Active/Standby and redundant ISP support*Not supported; Active/Active and Active/Standby*Active/Active and Active/StandbyActive/Active and Active/StandbyActive/Active and Active/Standby
Expansion slot1, SSC1, SSM1, SSM1, SSM0
User-accessible flash slot01111
USB 2.0 ports3 (1 on front, 2 on rear)2222
Serial ports1 RJ-45 console2 RJ-45, console and auxiliary2 RJ-45, console and auxiliary2 RJ-45, console and auxiliary2 RJ-45, console and auxiliary
Security lock slot (for physical security)10000
Memory (RAM)256 MB256 MB512 MB1024 MB4096 MB
Minimum system flash memory64 MB64 MB64 MB64 MB64 MB
System busMultibus architectureMultibus architectureMultibus architectureMultibus architectureMultibus architecture

*Available with an upgrade license

Note: If you want to see your preshared key for IPSEC without copy the file off the ASA via TFTP, FTP, etc...You can simply execute the command: 'more system:running-config | beg tunnel-group' from exec mode.

Average Rating: 0 (0 ratings)

Actions

Login or Register to take actions

This Document

Posted July 2, 2009 at 7:50 AM
Stats:
Comments:0 Avg. Rating:0
Views:4135 Contributors:0
Shares:0
Tags: No tags.

Documents Leaderboard