Cisco ASA 5500-X Series Next-Generation Firewalls Compare Models - Cisco Systems

Cisco ASA 5500-X Series Next-Generation Firewalls

Compare Models

With Cisco ASA firewalls, you can integrate multiple enterprise-class, next-generation networksecurity services without sacrificing performance. Cisco ASA combines the most deployedstateful inspection firewall in the industry with next-generation firewall capabilities.

Read more about the ASA 5500 and ASA 5500-X Series for small and branch offices.

Cisco ASAModel

ASA 5505/ SecurityPlus

ASA 5510 /Security Plus

ASA 5512-X /Security Plus

ASA 5515-X

End-Of-Life/End-of Sale(9/16/13)

X

StatefulInspectionthroughput(max1)

Up to 150Mbps

Up to 300 Mbps 1 Gbps 1.2 Gbps

StatefulInspectionthroughput(multiprotocol2)

- - 500 Mbps 600 Mbps

HOME

PRODUCTS & SERVICES

SECURITY

CISCO ASA 5500-X SERIESNEXT-GENERATION FIREWALLS

Compare Models

Models

Data Sheets and Literature

Interfaces and Modules

Services

Small Office and Branch Office Internet Edge Enterprise Data Center

Cisco ASA 5500-X Series Next-Generation Firewalls Compare Models - Cisco Systems http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

1 of 4 8/27/2013 4:21 PM

Next-Generationthroughput3

(multiprotocol)

- - 200 Mbps 350 Mbps

IPS throughput4 Up to 75Mbps withAIP SSC-5

Up to 150 Mbpswith AIP SSM-10;300 Mbps with AIPSSM-20

250 Mbps(Extra hardwaremodule notrequired)

400 Mbps(Extra hardwaremodule notrequired)

Concurrentsessions

10,000/25,000

50,000 /130,000 100,000 250,000

Connectionsper second

4,000 9,000 10,000 15,000

Packets persecond (64byte)

85,000 190,000 450,000 500,000

3DES/AES VPNthroughput5

100 Mbps 170 Mbps 200 Mbps 250 Mbps

Site-to-site andIPsec IKEv1client VPN usersessions

10/25 250 250 250

AnyConnect orclientless VPNuser sessions6

(AnyConnectlicenserequired)

25 250 250 250

Cisco CloudWeb Securityusers

25 75 100 250

VLANs 3 (trunkingdisabled) /20(trunkingenabled)

50 / 100 50 / 100 100


2 of 4 8/27/2013 4:21 PM

High-availabilitysupport7

Notavailable

Not available; A/Aand A/S

Not available; A/Aand A/S

A/A and A/S

Integrated I/O 8-port FEwith 2PoweroverEthernet(PoE)ports

5-port FE / 2-port10/100/1000,3-port FE

6-port10/100/1000

6-port10/100/1000

Expansion I/O Notavailable

4-port10/100/1000 or4-port GE (SFP)



Dual powersupplies

Notavailable

Not available Not available Not available

Power AC/DC AC/DC AC/DC AC/DC

1 Maximum throughput with UDP traffic measured under ideal test conditions2 Multiprotocol = Traffic profile consisting primarily of TCP-based protocols/applications likeHTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS3Throughput was measured using ASA CX Software Release 9.1.1 with multi-protocol traffic

profile with both Application Visibility Control (AVC) and Web Security Essentials (WSE). Trafficlogging was enabled as well.4 Firewall traffic that does not go through IPS service can have higher throughput.5 VPN throughput and sessions count depend on the ASA device configuration and VPN traffic

patterns. These elements should be taken into consideration as part of your capacity planning.Maximum throughput numbers are based on IPsec IKEv1 Remote Access VPN Connectivity.6 2 AnyConnect Premium User Licenses are included by default7 A/A = Active/Active; A/S = Active/Standby

Borderless Networks Information For Support About Cisco


3 of 4 8/27/2013 4:21 PM

Contacts | Feedback | Help | Site Map | Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks

Product PortfolioArchitecture

ServicesSolutionsIndustries

Community

Small BusinessMidsize Business

Service ProviderExecutivesHome (Linksys)

ContactsContact CiscoFind a Partner

DownloadsDocumentation

CommunitiesDeveloper NetworkLearning Network

Support Community

Video Portal

Investor RelationsCorporate Social Responsibility

Environmental SustainabilityTomorrow Starts HereCareer Opportunities

ProgramsCisco PoweredFinancing Options

Industries


4 of 4 8/27/2013 4:21 PM

Documents

Cisco ASA 5500-X Series Next-Generation Firewalls Compare Models - Cisco Systems