15
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Presentation_I D 1 Catalyst 6500 ASA Service Module

Catalyst 6500 ASA Service Module

  • Upload
    ixia

  • View
    142

  • Download
    0

Embed Size (px)

DESCRIPTION

We were also fortunate to have Chris Morosco from Cisco join BreakingPoint's Mike Hamilton to talk about and demonstrate a live test of the Catalyst 6500 ASA Service Module, which was made up of four ASA 5585x security blades in a Catalyst 6500 switch.

Citation preview

Page 1: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 1

Catalyst 6500 ASA Service Module

Page 2: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 2

Increasing Demands

3G3G

4G4G

Home Office Coffee Shop AirportCorporate Office Mobile User

Page 3: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 3

CONNECTIONS PER SECOND

THROUGHPUT

# OF CONCURRENT CONNECTIONS

9 7 95 8

Power & Space

Page 4: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 4

Cisco ASA 5585-X

Firewall IPS Remote access

MultiScaleTM

Page 5: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 5

Cisco ASA 5500 Series Portfolio Comprehensive Solutions from SOHO to the Data Center

Multi-Service (Firewall/VPN and IPS)

Pe

rfo

rma

nce

an

d S

cala

bili

ty

Data CenterCampusBranch OfficeSOHO Internet Edge

ASA 5585 SSP-60(20 Gbps, 350K cps)

ASA 5585 SSP-40(10 Gbps, 200K cps)

ASA 5585 SSP-20(5 Gbps, 125K cps)

ASA 5585 SSP-10(2 Gbps, 50K cps)

ASA 5540 (650 Mbps,25K cps)

ASA 5520 (450 Mbps,12K cps)

ASA 5510 (300 Mbps,9K cps)

ASA 5505 (150 Mbps, 4K cps)

Firewall and VPN Appliance

FWSM(3 Gbps, 50K cps)

Page 6: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 6

Part of a Full Portfolio Solution

Software focused and hardware agnostic

Single code base for all deployments

No compromising features for form factor

All managed in the same way with the same toolsCSM

AS

DM C

LI

Page 7: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 7

Introducing the Cisco Catalyst 6500 series ASA Services Module

ASA security blade for the Catalyst 6500

Places security directly into the datacenter backbone

Simplified installation and greater flexibility

High performance and capacity

MultiScaleTM

Page 8: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 8

Cisco ASA 5500 Series Portfolio Comprehensive Solutions from SOHO to the Data Center

Multi-Service (Firewall/VPN and IPS)

Pe

rfo

rma

nce

an

d S

cala

bili

ty

Data CenterCampusBranch OfficeSOHO Internet Edge

ASA 5585 SSP-60(20 Gbps, 350K cps)

ASA 5585 SSP-40(10 Gbps, 200K cps)

ASA 5585 SSP-20(5 Gbps, 125K cps)

ASA 5585 SSP-10(2 Gbps, 50K cps)

ASA 5540 (650 Mbps,25K cps)

ASA 5520 (450 Mbps,12K cps)

ASA 5510 (300 Mbps,9K cps)

ASA 5505 (150 Mbps, 4K cps)

Firewall and VPN Appliance

FWSM(3 Gbps, 100K cps)

ASASM(16 Gbps, 300K cps)

NEW

Page 9: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 9

Targeted Deployment

5 Gbps firewall

10 Gbps firewall

20 Gbps firewall

2 Gbps firewall

Available World-wide and Shipping Now

Data CenterCampus

16 Gbps firewall

Page 10: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 10

Performance Measurements

Max Performance IMIXEMIX

(Multi Protocol)

Packet Size 1500 Varies Varies

Protocol UDP TCP TCP/UDP

Page 11: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 11

Performance Results

Metric ASASM

Max Throughput (EMIX) 16 Gbps

Concurrent Connections 10M

New Connections /Second 300K

Max Security Contexts 250

Max VLANs 1k

Page 12: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 12

Double the nearest competitors performance

Session count over four times the nearest competitor

Best Per Blade Performance

Comp 3k Comp 5k ASASM0

2

4

6

8

10

12

14

16

Page 13: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 13

Best Solution Price and Performance

Competitor

8 FW Cards

4 IO Cards

5,000 watts

16 U

CAT6K-E+ASASM

• 4 ASASMs

• 2 4x10G I/OC

• 1 SUP 720-10G

• 5,000 watts

• 15U

~40% more performance/capacity at less than half the price

Page 14: Catalyst 6500 ASA Service Module

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialPresentation_ID 14

In Summary

ASA security blade for the Catalyst 6500 Switch

Best performance per blade in the industry

Fastest single chassis performance in the industry

Works with the majority of Catalyst 6500s

Leverages the same software, management and feature roadmap as the other ASA products

Lower Capex and Opex than competing solutions

Simplifies installation and increases flexibility

Page 15: Catalyst 6500 ASA Service Module