Cisco ASA

In computer networking, Cisco ASA 5500 Series Adaptive Security Appliances, or simply Cisco ASA 5500 Series, is Cisco's line of network security devices introduced in 2005,[1] that succeeded three existing lines of popular Cisco products:

Contents

Specifications of past and present models

Like the Cisco PIX firewalls, the ASAs are based on Intel x86 architecture. The ASA series of devices run PIX code 7.0 and later. Through PIX OS release 7.x the PIX and the ASA use the same software images. Examples of emulators include PEMU and Dynagen [1], and with NetworkSims (Networksims) for a simulator.

Model 5505 5510 5520 5540 5550 5580-20 5580-40 5585-X-SSP20 5585-X-SSP60
Introduced 2006 2005 2005 2005 2006 2008 2008 2010 2010
CPU Type AMD Geode LX Intel Celeron Intel
Pentium 4
Celeron		 Intel Pentium 4 Intel Pentium 4 AMD Opteron (2 CPU, 4 cores) AMD Opteron (4 CPU, 8 cores) Intel (16 cores) Intel (24 cores)
CPU Speed 500 MHz 1.6 GHz 2.0 GHz 2.0 GHz 3.0 GHz 2.6 GHz 2.6 GHz 2.4 GHz
Chipset Geode CS5536 Intel 875P
Canterwood
Default RAM 512MB 1GB 2GB 2GB 4GB 8GB 12GB 12GB 24GB
Boot Flash Device ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash ATA CompactFlash
Default Flash 128MB 256MB 256MB 256MB 256MB 1GB 1GB 2GB 2GB
Min OS Version 7.2.1 7.0.1 7.0.1 7.0.1 7.1.1 8.1.1 8.1.1
Max Virtual Interfaces 3 (trunking disabled) or 20 (trunking enabled) with Sec Plus License 50 or 100 with Sec Plus License 150 200 250 250 250
Network chipset(s) Marvell 88E6095
Expansion Modules Supported AIP-SSC CSC-SSM, AIP-SSM, 4GE-SSM CSC-SSM, AIP-SSM, 4GE-SSM CSC-SSM, AIP-SSM, 4GE-SSM No 6 Interface Cards 6 Interface Cards IPS-SSP SSP-20 IPS-SSP SSP-60
Supports SSL VPN Yes - 2 included, Max 25 Yes - 2 included, Max 250 Yes - 2 included, Max 750 Yes - 2 included, Max 2500 Yes - 2 included, Max 5000 Yes - 2 included, Max 10000 Yes - 2 included, Max 10000 Yes - 2 included, Max 10000 Yes - 2 included, Max 10000
Failover Supported Stateless Active/Standby (with Sec Plus License) Active/Standby, Active/Active (with Sec Plus License) Active/Standby, Active/Active Active/Standby, Active/Active Active/Standby, Active/Active Active/Standby, Active/Active Active/Standby, Active/Active Active/Standby, Active/Active Active/Standby, Active/Active
Model 5505 5510 5520 5540 5550 5580-20 5580-40 5585-X-SSP20 5585-X-SSP60

Performance specifications

Model 5505[2] 5510[2] 5520[2] 5540[2] 5550[2] 5580-20[2] 5580-40[2] 5585-X SSP10[2] 5585-X SSP20[2] 5585-X SSP40[2] 5585-X SSP60[2]
Cleartext throughput, Mbit/s 150 300 450 650 1,200 5,000 10,000 3,000 7,000 12,000 20,000
AES/Triple DES throughput, Mbit/s 100 170 225 325 425 1,000 1,000 1,000 2,000 3,000 5,000
Max simultaneous connections 10,000 (25,000 with Sec Plus License) 50,000 (130,000 with Sec Plus License) 280,000 400,000 650,000 1,000,000 2,000,000 1,000,000 2,000,000 4,000,000 10,000,000
Max site-to-site and remote access VPN sessions 10 (25 with Sec Plus License) 250 750 5,000 5,000 10,000 10,000 5,000 10,000 10,000 10,000
Max number of SSL VPN user sessions 25 250 750 2,500 5,000 10,000 10,000 5,000 10,000 10,000 10,000
Model 5505 5510 5520 5540 5550 5580-20 5580-40 5585-X SSP10 5585-X SSP20 5585-X SSP40 5585-X SSP60

References

  1. ^ Cisco press release quote: "Las Vegas (Interop) May 3, 2005 – Cisco Systems, Inc., today announced the availability of the Cisco ASA 5500 Series Adaptive Security Appliance s"
  2. ^ a b c d e f g h i j k "Cisco ASA Model Comparison page". http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html. Retrieved 2008-05-15. 

External links