Introduction
Cisco ASA 5500 Series Adaptive Security Appliances integrate firewall, Unified Communications (voice/video) security, SSL and IPSec VPN, intrusion prevention (IPS), and content security services in a flexible, modular product. They are a key component of the Cisco Self-Defending Network. They provide intelligent threat defense and secure communications services that stop attacks before they impact the network.
.
Product Comparison
ASA Model | Cisco ASA 5505 | Cisco ASA 5510 | Cisco ASA 5520 | Cisco ASA 5540 | Cisco ASA 5550 |
|---|
| Users/nodes | 10, 50, or unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Firewall and types throughput | Up to 150 Mbps | Up to 300 Mbps | Up to 450 Mbps | Up to 650 Mbps | Up to 1.2 Gbps |
| Concurrent threat mitigation throughput (firewall + IPS services) | Not available | Up to 150 Mbps with
Intrusion Detection/SSM-AIP-10
Up to 300 Mbps with
Intrusion Detection/SSM-AIP-20 | Up to 225 Mbps withIntrusion Detection/SSM-AIP-10
Up to 375 Mbps withIntrusion Detection/SSM-AIP-20 | Up to 450 Mbps withIntrusion Detection/SSM-AIP-20 | Not available |
| 3DES/AES VPN throughput | Up to 100 Mbps | Up to 170 Mbps | Up to 225 Mbps | Up to 325 Mbps | Up to 425 Mbps |
| IPSec VPN peers | 10; 25* | 250 | 750 | 5000 | 5000 |
| SSL VPN peers* (included/maximum) | 2/25 | 2/250 | 2/750 | 2/2500 | 2/5000 |
| Concurrent sessions | 10,000; 25,000* | 50,000; 130,000* | 280,000 | 400,000 | 650,000 |
| New sessions/second | 3000 | 6000 | 9000 | 20,000 | 28,000 |
| Integrated network ports | 8-port Fast Ethernet switch (including 2 PoE ports) | 3 Fast Ethernet + 1 management port; 5 Fast Ethernet ports* | 4 Gigabit Ethernet, 1 Fast Ethernet | 4 Gigabit Ethernet, 1 Fast Ethernet | 8 Gigabit Ethernet, 4 SFP Fiber, 1 Fast Ethernet |
| Virtual interfaces (VLANs) | 3 (no trunking support) / 20 (with trunking support)* | 50 /100* | 150 | 200 | 250 |
| Security contexts (included/maximum) | 0/0 | 0/0 (Base); 2/5 (Security Plus) | 2/20 | 2/50 | 2/50 |
| High availability | Not supported; stateless Active/Standby and redundant ISP support* | Not supported; Active/Active and Active/Standby* | Active/Active and Active/Standby | Active/Active and Active/Standby | Active/Active and Active/Standby |
| Expansion slot | 1, SSC | 1, SSM | 1, SSM | 1, SSM | 0 |
| User-accessible flash slot | 0 | 1 | 1 | 1 | 1 |
| USB 2.0 ports | 3 (1 on front, 2 on rear) | 2 | 2 | 2 | 2 |
| Serial ports | 1 RJ-45 console | 2 RJ-45, console and auxiliary | 2 RJ-45, console and auxiliary | 2 RJ-45, console and auxiliary | 2 RJ-45, console and auxiliary |
| Security lock slot (for physical security) | 1 | 0 | 0 | 0 | 0 |
| Memory (RAM) | 256 MB | 256 MB | 512 MB | 1024 MB | 4096 MB |
| Minimum system flash memory | 64 MB | 64 MB | 64 MB | 64 MB | 64 MB |
| System bus | Multibus architecture | Multibus architecture | Multibus architecture | Multibus architecture | Multibus architecture |
*Available with an upgrade license
Note: If you want to see your preshared key for IPSEC without copy the file off the ASA via TFTP, FTP, etc...You can simply execute the command: 'more system:running-config | beg tunnel-group' from exec mode.
