Upload
ixia
View
142
Download
0
Tags:
Embed Size (px)
DESCRIPTION
We were also fortunate to have Chris Morosco from Cisco join BreakingPoint's Mike Hamilton to talk about and demonstrate a live test of the Catalyst 6500 ASA Service Module, which was made up of four ASA 5585x security blades in a Catalyst 6500 switch.
Citation preview
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 1
Catalyst 6500 ASA Service Module
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 2
Increasing Demands
3G3G
4G4G
Home Office Coffee Shop AirportCorporate Office Mobile User
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 3
CONNECTIONS PER SECOND
THROUGHPUT
# OF CONCURRENT CONNECTIONS
9 7 95 8
Power & Space
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 4
Cisco ASA 5585-X
Firewall IPS Remote access
MultiScaleTM
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 5
Cisco ASA 5500 Series Portfolio Comprehensive Solutions from SOHO to the Data Center
Multi-Service (Firewall/VPN and IPS)
Pe
rfo
rma
nce
an
d S
cala
bili
ty
Data CenterCampusBranch OfficeSOHO Internet Edge
ASA 5585 SSP-60(20 Gbps, 350K cps)
ASA 5585 SSP-40(10 Gbps, 200K cps)
ASA 5585 SSP-20(5 Gbps, 125K cps)
ASA 5585 SSP-10(2 Gbps, 50K cps)
ASA 5540 (650 Mbps,25K cps)
ASA 5520 (450 Mbps,12K cps)
ASA 5510 (300 Mbps,9K cps)
ASA 5505 (150 Mbps, 4K cps)
Firewall and VPN Appliance
FWSM(3 Gbps, 50K cps)
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 6
Part of a Full Portfolio Solution
Software focused and hardware agnostic
Single code base for all deployments
No compromising features for form factor
All managed in the same way with the same toolsCSM
AS
DM C
LI
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 7
Introducing the Cisco Catalyst 6500 series ASA Services Module
ASA security blade for the Catalyst 6500
Places security directly into the datacenter backbone
Simplified installation and greater flexibility
High performance and capacity
MultiScaleTM
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 8
Cisco ASA 5500 Series Portfolio Comprehensive Solutions from SOHO to the Data Center
Multi-Service (Firewall/VPN and IPS)
Pe
rfo
rma
nce
an
d S
cala
bili
ty
Data CenterCampusBranch OfficeSOHO Internet Edge
ASA 5585 SSP-60(20 Gbps, 350K cps)
ASA 5585 SSP-40(10 Gbps, 200K cps)
ASA 5585 SSP-20(5 Gbps, 125K cps)
ASA 5585 SSP-10(2 Gbps, 50K cps)
ASA 5540 (650 Mbps,25K cps)
ASA 5520 (450 Mbps,12K cps)
ASA 5510 (300 Mbps,9K cps)
ASA 5505 (150 Mbps, 4K cps)
Firewall and VPN Appliance
FWSM(3 Gbps, 100K cps)
ASASM(16 Gbps, 300K cps)
NEW
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 9
Targeted Deployment
5 Gbps firewall
10 Gbps firewall
20 Gbps firewall
2 Gbps firewall
Available World-wide and Shipping Now
Data CenterCampus
16 Gbps firewall
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 10
Performance Measurements
Max Performance IMIXEMIX
(Multi Protocol)
Packet Size 1500 Varies Varies
Protocol UDP TCP TCP/UDP
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 11
Performance Results
Metric ASASM
Max Throughput (EMIX) 16 Gbps
Concurrent Connections 10M
New Connections /Second 300K
Max Security Contexts 250
Max VLANs 1k
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 12
Double the nearest competitors performance
Session count over four times the nearest competitor
Best Per Blade Performance
Comp 3k Comp 5k ASASM0
2
4
6
8
10
12
14
16
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 13
Best Solution Price and Performance
Competitor
8 FW Cards
4 IO Cards
5,000 watts
16 U
CAT6K-E+ASASM
• 4 ASASMs
• 2 4x10G I/OC
• 1 SUP 720-10G
• 5,000 watts
• 15U
~40% more performance/capacity at less than half the price
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 14
In Summary
ASA security blade for the Catalyst 6500 Switch
Best performance per blade in the industry
Fastest single chassis performance in the industry
Works with the majority of Catalyst 6500s
Leverages the same software, management and feature roadmap as the other ASA products
Lower Capex and Opex than competing solutions
Simplifies installation and increases flexibility