Cisco ASA 5505 Unlimited-User Bundle
includes 8-port Fast Ethernet switch, Unlimited IPsec VPN
peers, 2 SSL VPN peers, Triple Data Encryption Standard/Advanced Encryption
Standard (3DES/AES) license. ASA5505-SEC-BUN-K9 MSRP
1695.00
style='font-size:10.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Cisco®
style='font-size:10.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'> ASA 5500 Series Adaptive Security Appliances are
purpose-built solutions that combine best-in-class security and VPN services
with an innovative, extensible services architecture. Designed as a core
component of the Cisco Self-Defending Network, the Cisco ASA 5500 Series
provides proactive threat defense that stops attacks before they spread through
the network, controls network activity and application traffic, and delivers
flexible VPN connectivity. The result is a powerful multifunction network
security appliance family that provides the security breadth and depth for
protecting home office, branch office, small and medium-sized business,
enterprise, and data center networks while reducing the overall deployment and
operations costs and complexities associated with providing this new level of security.
name=wp9001151>The Cisco ASA 5500 Series delivers a
powerful combination of multiple market-proven technologies in a single
platform, making it operationally and economically feasible for organizations
to deploy comprehensive security services to more locations. The comprehensive
portfolio of services within the Cisco ASA 5500 Series enables customization
for location-specific needs through tailored product editions for small to
medium-sized businesses and for enterprises. These editions enable superior
protection by providing the right services for the right location. Each edition
combines a focused set of Cisco ASA 5500 Series services (such as firewall, SSL
and IPsec VPN, IPS, and content security services) to
meet the needs of specific environments within the enterprise network. By
ensuring the security needs of each location are met, the overall network
security posture is raised.
name=wp9001152>Figure
1. Cisco ASA 5500 Series Adaptive
Security Appliances
name=wp9001154>The Cisco ASA 5500 Series helps
businesses more effectively and efficiently protect their networks while
delivering exceptional investment protection through the following key
elements:
name=wp9001155>• Market-proven security and VPN
capabilities-Full-featured, high-performance firewall, intrusion prevention
(IPS), content security, and Secure Sockets Layer/IP Security (SSL/
class=SpellE>IPsec) VPN technologies deliver robust application
security, user- and application-based access control, worm and virus
mitigation, malware protection, content filtering, and remote user/site
connectivity.
name=wp9001156>• Extensible services
architecture-Taking advantage of a modular services processing and policy
framework offered by the Cisco ASA 5500 Series, businesses can apply specific
security and network services on a per-traffic-flow basis, delivering highly
granular policy controls and a wide range of protective services with
streamlined traffic processing. The efficiencies of this policy framework, as
well as software and hardware extensibility through user-installable security
services modules (SSMs) and security services cards (SSCs), advance the
evolution of existing services and the deployment of new services without
requiring a platform replacement or performance compromise. With these
class=SpellE>capabilites, the Cisco ASA 5500 Series provides the
foundation for highly customizable security policies and unprecedented services
extensibility to help protect against the fast-evolving threat environment.
name=wp9001157>• Reduced deployment and
operations costs-The multifunction Cisco ASA 5500 Series allows for
platform, configuration, and management standardization, helping to decrease
the costs of deployment and ongoing operations.
Introducing
the Cisco ASA 5500 Series
name=wp9001159>The Cisco ASA 5500 Series includes
the Cisco ASA 5505, 5510, 5520, 5540, 5550, and 5580 Adaptive Security
Appliances-purpose-built, high-performance security solutions that take advantage
of Cisco expertise in developing industry-leading, award-winning security and
VPN solutions. The series builds upon proven technologies from Cisco PIX®
500 Series Security Appliances, Cisco IPS 4200 Series Sensors, and Cisco VPN
3000 Series Concentrators. Designed as a key component of the Cisco
Self-Defending Network, the Cisco ASA 5500 Series provides proactive threat
defense that stops attacks before they spread through the network, controls
network activity and application traffic, and delivers flexible VPN
connectivity. The result is a powerful multifunction network security appliance
family that provides the security breadth and depth for protecting small and
medium-sized business (SMB), enterprise, and service provider networks while
reducing the overall deployment and operations costs and complexities
associated with providing this new level of security.
name=wp9001160>Through its unique Modular Policy
Framework (MPF), the Cisco ASA 5500 Series brings a new level of security and policy
control to applications and networks. MPF allows businesses to adapt and extend
the profile of the Cisco ASA 5500 Series through highly customizable,
flow-specific security policies tailored to application requirements while
providing performance and extensibility through user-installable SSMs. This
adaptable architecture enables businesses to rapidly deploy security services
when and where they are needed, such as tailoring inspection techniques to
specific application and user needs or adding additional intrusion prevention
and content security such as those delivered by the Adaptive Inspection and
Prevention (AIP) and Content Security and Control (CSC) SSM. Furthermore, the
modular hardware architecture of the Cisco ASA 5500 Series along with flexible
MPF enables the integration of future network and security, extending the
outstanding investment protection provided by the Cisco ASA 5500 Series, and
allowing businesses to adapt their network defenses to new threats as they
arise.
name=wp9001161>All Cisco ASA 5500 Series appliances
include maximum IPsec VPN users on the base system;
SSL VPN is licensed and purchased separately. By converging SSL and
class=SpellE>IPsec VPN services with comprehensive threat defense
technologies, the Cisco ASA 5500 Series provides highly customizable network
access tailored to meet the requirements of diverse deployment environments
while providing advanced endpoint and network-level security.
Cisco
ASA 5505 Adaptive Security Appliance
name=wp9001163>The Cisco ASA 5505 Adaptive Security
Appliance is a next-generation, full-featured security appliance for small
business, branch office, and enterprise teleworker
environments. The Cisco ASA 5505 delivers high-performance firewall, SSL and
class=SpellE>IPsec VPN, and rich networking services in a modular,
"plug-and-play" appliance. Using the integrated Cisco Adaptive
Security Device Manager, the Cisco ASA 5505 can be rapidly deployed and easily
managed, enabling businesses to minimize operations costs. The Cisco ASA 5505
features a flexible 8-port 10/100 Fast Ethernet switch, whose ports can be
dynamically grouped to create up to three separate VLANs for home, business,
and Internet traffic for improved network segmentation and security. The Cisco
ASA 5505 provides two Power over Ethernet (
class=SpellE>PoE) ports, enabling simplified deployment of Cisco IP
phones with zero-touch secure voice over IP (VoIP) capabilities, and deployment
of external wireless access points for extended network mobility. The Cisco ASA
5505 also provides significant expandability and investment protection through
its modular design, similar to the rest of the Cisco ASA 5500 Series, offering
both an external expansion slot and multiple USB ports that enable the addition
of services in the future.
name=wp9001164>As business needs grow, customers
can install a Security Plus upgrade license, enabling the Cisco ASA 5505
Adaptive Security Appliance to scale to support a higher connection capacity
and a higher number of IPsec VPN users, add full DMZ
support, and integrate into switched network environments through VLAN
class=SpellE>trunking support. Furthermore, this upgrade license
maximizes business continuity by enabling support for redundant ISP connections
and stateless Active/Standby high-availability services. This combination of
market-leading security and VPN services, advanced
networking features, flexible remote management capabilities, and future
extensibility makes the Cisco ASA 5505 an excellent choice for businesses
requiring a best-in-class small business, branch office, or enterprise
class=SpellE>teleworker security solution.
name=wp9001165>Table 1 lists features of the Cisco
ASA 5505.
name=wp9001166>Table
1. Cisco ASA 5505 Adaptive Security
Appliance Platform Capabilities and Capacities
style='mso-cellspacing:0in;mso-yfti-tbllook:1184;mso-padding-alt:2.25pt 2.25pt 2.25pt 2.25pt'>
name=wp9000001>Feature
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Description
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Firewall Throughput
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Up to 150 Mbps
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>VPN Throughput
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Up to 100 Mbps
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Concurrent Sessions
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Unlimited
|
class=SpellE>IPsec
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'> VPN Peers
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Unlimited |
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>SSL VPN Peer License Levels*
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Unlimited |
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Interfaces
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>8-port Fast Ethernet switch with dynamic port grouping
(including 2 PoE ports)
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Virtual Interfaces (VLANs)
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>3 (no trunking support) / 20
(with trunking support)**
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>High Availability
|
style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:
"Times New Roman"'>Not supported; stateless Active/Standby and redundant ISP
support**
|