Products

Your small offices or branch locations require the best network security available. An integrated solution that is easy to deploy and manage improves IT efficiency. Affordable pricing and the ability to scale as necessary are other important product benefits. You get all that and more with the Cisco®ASA 5505 Adaptive Security Appliance Firewalls. These firewalls are used and trusted by small and midsize businesses with one or a few locations.

Enterprise class security. Cisco MultiScale®performance, The ability to deliver multiple security services at scale. Unprecedented services flexibility. Modular scalability. Feature extensibility. Lower deployment and operational costs. All of these features and benefits add up to tremendous value in the Cisco ASA 5505 Adaptive Security Appliance. Available models deliver the same proven level of security that protects the networks of some of the largest and most security-conscious companies in the world.

Product Overview

The Cisco ASA 5505 is a full-featured firewall for small business, branch, and enterprise teleworker environments. It delivers high-performance firewall, SSL and IPsec VPN, and rich networking services in a modular, immediately operational appliance. Using the integrated graphical Cisco Adaptive Security Device Manager (ASDM), the Cisco ASA 5505 can be rapidly deployed and easily managed, helping businesses reduce operational costs. It features a flexible 8-port 10/100 Fast Ethernet switch whose ports can be dynamically grouped to create up to three separate VLANs for home, business, and Internet traffic for improved network segmentation and security.

The Cisco ASA 5505 provides two Power over Ethernet (PoE) ports, simplifying the deployment of Cisco IP phones with highly secure zero-touch voice over IP (VoIP) capabilities and the deployment of external wireless access points for extended network mobility. A high-performance intrusion prevention and worm mitigation service is available with the addition of the Advanced Inspection and Prevention Security Services Card (AIP SSC). Multiple USB ports can be used to implement additional services and capabilities, as needed.

As your business needs grow, you can install a Security Plus upgrade license, The Cisco ASA 5505 can then scale to support a higher site to site VPN connection capacity of 25 IPsec VPN connections, add full DMZ support, and integrate into switched network environments through VLAN trunking support. This upgrade license improves business continuity by helping to enable support for redundant ISP connections and stateless active/standby high-availability services.

This combination of market-leading security and VPN services, advanced networking features, flexible remote management capabilities, and future extensibility makes the Cisco ASA 5505 an excellent choice for businesses requiring a best-in-class small business, branch, or enterprise teleworker security solution.

Specs
Data transmission:
Firewall throughput:	150 Mbit/s
VPN throughput:	100 Mbit/s
IPS/IDS throughput:	75 Mbit/s
Mobile VPN IPSec:	10
Mobile VPN SSL:	2
Maximum firewall connections per second:	4000
Performance:
Heat dissipation:	72 BTU/h
Concurrent connections:	10000
Certification:	FCC, CE, VCCI ITE, CISPR 22, EN 60950, EN 61000-3-2, IEC 60950, EN 61000-3-3, UL 60950, CSA 22.2 No. 60950, EN55022, AS/NZ 3548
Network:
Wi-Fi:	✗
Number of users:	50 user(s)
Number of VLANs:	3
Security:
Security algorithms:	3DES,AES
Management features:
LED indicators:	✓
Ports & interfaces:
Connectivity technology:	Wired
Fast Ethernet (copper) ports quantity:	8
USB 2.0 ports quantity:	3
Ethernet LAN (RJ-45) ports:	8
Serial ports quantity:	1
Memory:
Internal memory:	512 MB
Storage:
Flash memory:	128 MB
Design:
Rack mounting:	✓
Form factor:	1U
Power:
AC input voltage:	100-240 V
AC input frequency:	50 - 60 Hz
Input current:	1.8 A
Peak power:	96 W
Operational conditions:
Operating temperature (T-T):	0 - 40 °C
Storage temperature (T-T):	-25 - 70 °C
Operating relative humidity (H-H):	5 - 95%
Operating altitude:	0 - 2000 m
Non-operating altitude:	0 - 4570 m
Weight & dimensions:
Dimensions (WxDxH):	200.04 x 174.5 x 44.5 mm
Weight:	1.8 kg

How do you deliver enterprise-class security for small offices while meeting their network, budgetary, and performance requirements? With Cisco® ASA CX 5500-X Series Next-Generation Firewalls (ASA CX). They combine proven stateful inspection firewall features with the ASA CX Context-Aware suite of next-generation firewall services for networks of all sizes: small and midsize businesses with one or more locations, large enterprises, service providers, and mission-critical data centers. The Cisco ASA CX firewalls deliver:

- Scalable performance
- Industry-leading service flexibility
- Modular scalability
- Feature extensibility
- Low deployment and operational costs

Before you add these services to the Cisco ASA 5500-X Series or purchase the ASA 5500-X Series, consider our newest offering, the Cisco ASA with FirePOWER™ Services. For a similar price, you can get proven ASA firewall protection combined with industry-leading Sourcefire® threat and advanced malware protection (AMP) in a single device.

Features and Benefits

Available in a wide range of sizes, Cisco ASA CX models provide the same level of security that protects the networks of some of the largest and most security-conscious companies in the world. They also provide Cisco ASA CX series next-generation firewall services, which include Cisco Application Visibility and Control (AVC), web security, botnet filtering, and intrusion prevention, so you can add these security features to new applications and devices in your network.

Cisco ASA CX 5500-X Series Next-Generation Firewalls for small offices and branch locations protect critical assets in several ways:

- Exceptional next-generation firewall services provide the visibility and detailed control that your enterprise needs to safely take advantage of new applications and devices.^[1]
- Cisco AVC controls specific behaviors within allowed microapplications.
- Cisco Web Security Essentials (WSE) restricts web and web application use based on the reputation
- of a site.
- Broad and deep network security through an array of integrated cloud- and software-based next-generation firewall services is backed by Cisco Security Intelligence Operations (SIO).
- A highly effective intrusion prevention system (IPS) is provided with Cisco Global Correlation.
- A high-performance VPN and always-on remote access are included.
- Additional security services can be implemented quickly and easily in response to changing needs.

Cisco ASA CX 5500-X Models

The Cisco ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X CX Series Adaptive Security Appliances combine the most widely deployed stateful inspection firewall in the industry with a comprehensive suite of next-generation network security services for comprehensive security without compromise. They provide multiple security services and redundant power supplies and support consistent security enforcement throughout your organization. In addition to comprehensive stateful inspection firewall capabilities, optional features include integrated cloud- and software-based security services, Cisco AVC, Cisco WSE, Cisco Cloud Web Security (CWS), and IPS. Cisco next-generation firewalls are managed by Cisco Prime™ Security Manger. These models vary in their performance and throughput capabilities and in the services and number of users that can be supported by each model. Depending on the customer requirements and performance needs, these firewalls can be deployed at small office, Internet edge, and data center locations.

This ASA CX series of next-generation firewalls is built on the same proven security platform as the rest of the Cisco ASA family of firewalls and delivers exceptional application visibility and control along with superior performance and operational efficiency. These firewalls provide next-generation services that make it possible to take advantage of new applications and devices without compromising security. Unlike other firewalls, the Cisco ASA 5500-X Series keeps pace with rapidly evolving needs by offering end-to-end network intelligence gained by combining the visibility of local traffic with in-depth global network intelligence. The Cisco ASA 5500-X Series is supported by:

- Cisco TrustSec® Technology
- Cisco AnyConnect® Secure Mobility Solution for Unique Mobile Client Insight
- Cisco SIO for Near-Real-Time Threat Information and Proactive Protection
- Cisco ASA Next-Generation Firewall Services

Specs
Data transmission:
Firewall throughput:	1200 Mbit/s
VPN throughput:	250 Mbit/s
IPS/IDS throughput:	400 Mbit/s
Maximum firewall connections per second:	15000
Performance:
Concurrent connections:	250000
Noise level:	64.2 dB
Network:
Number of users:	3000 user(s)
Number of VLANs:	100
Protocols:
Management protocols:	HTTP, SMTP, FTP, IMAPv4, BitTorrent, DNS
Management features:
LED indicators:	✓
Ports & interfaces:
Connectivity technology:	Wired
USB 2.0 ports quantity:	2
Ethernet LAN (RJ-45) ports:	7
Serial ports quantity:	1
WAN connection:	Ethernet (RJ-45)
Memory:
Internal memory:	8192 MB
Storage:
Storage media type:	SSD
Total storage capacity:	120 GB
SSD capacity:	120 GB
Design:
Rack mounting:	✓
Form factor:	1U
Power:
AC input voltage:	100-240 V
AC input frequency:	50 - 60 Hz
Input current:	4.85 A
Power consumption (typical):	65 W
Peak power:	70 W
Operational conditions:
Operating temperature (T-T):	-5 - 40 °C
Storage temperature (T-T):	-25 - 70 °C
Operating relative humidity (H-H):	10 - 90%
Storage relative humidity (H-H):	10 - 90%
Operating altitude:	0 - 4572 m
Non-operating altitude:	0 - 4572 m
Weight & dimensions:
Dimensions (WxDxH):	429 x 395 x 42.4 mm
Weight:	6.07 kg
Other features:
Power LED:	✓

The Cisco ASA 5520 Adaptive Security Appliance delivers security services with Active/Active high availability and Gigabit Ethernet connectivity for medium-sized enterprise networks in a modular, high-performance appliance. With four Gigabit Ethernet interfaces and support for up to 100 VLANs, businesses can easily deploy the Cisco ASA 5520 into multiple zones within their network. The Cisco ASA 5520 Adaptive Security Appliance scales with businesses as their network security requirements grow, delivering solid investment protection.

Businesses can extend their SSL and IPsec VPN capacity to support a larger number of mobile workers, remote sites, and business partners. Businesses can scale up to 750 SSL VPN peers on each Cisco ASA 5520 by installing an SSL VPN upgrade license; 750 IPsec VPN peers are supported on the base platform. VPN capacity and resiliency can be increased by taking advantage of the Cisco ASA 5520's integrated VPN clustering and load-balancing capabilities. The Cisco ASA 5520 supports up to 10 appliances in a cluster, offering a maximum of 7500 SSL VPN peers or 7500 IPsec VPN peers per cluster. For business continuity and event planning, the Cisco ASA 5520 can also benefit from the Cisco VPN FLEX licenses, which enable administrators to react to or plan for short-term bursts of concurrent SSL VPN remote-access users, for up to a 2-month period.

The advanced application-layer security and content security defenses provided by the Cisco ASA 5520 can be extended by deploying the high-performance intrusion prevention and worm mitigation capabilities of the AIP SSM, or the comprehensive malware protection of the CSC SSM. Using the optional security context capabilities of the Cisco ASA 5520 Adaptive Security Appliance, businesses can deploy up to 20 virtual firewalls within an appliance to enable compartmentalized control of security policies on a departmental level. This virtualization strengthens security and reduces overall management and support costs while consolidating multiple security devices into a single appliance.

Specs
Data transmission:
Firewall throughput:	450 Mbit/s
Maximum data transfer rate:	1000 Mbit/s
VPN throughput:	225 Mbit/s
Mobile VPN IPSec:	750
Mobile VPN SSL:	2
Maximum firewall connections:	12000
Maximum firewall connections per second:	12000
Performance:
Heat dissipation:	648 BTU/h
Concurrent connections:	280000
Noise level:	60 dB
Certification:	CE marking, FCC Part 15 Class A, AS/NZS CISPR22 Class A, VCCI Class A, EN55022 Class A, CISPR22 Class A, EN61000-3-2, EN61000-3-3
Network:
Wi-Fi:	✗
Number of VLANs:	150
Security:
Security algorithms:	3DES,AES
Protocols:
Supported network protocols:	IPSec
Management features:
LED indicators:	✓
Ports & interfaces:
Connectivity technology:	Wired
Gigabit Ethernet (copper) ports quantity:	4
Fast Ethernet (copper) ports quantity:	1
USB 2.0 ports quantity:	2
Serial ports quantity:	2
Memory:
Internal memory:	512 MB
Storage:
Storage media type:	Flash
Flash memory:	64 MB
Design:
Rack mounting:	✓
Form factor:	1U
Power:
AC input voltage:	100-240 V
AC input frequency:	47/63 Hz
Input current:	3 A
Power consumption (typical):	150 W
Peak power:	190 W
Number of power supply units:	1
Operational conditions:
Operating temperature (T-T):	0 - 40 °C
Storage temperature (T-T):	-25 - 70 °C
Operating relative humidity (H-H):	5 - 95%
Storage relative humidity (H-H):	5 - 95%
Operating altitude:	0 - 2000 m
Non-operating altitude:	0 - 4570 m
Weight & dimensions:
Dimensions (WxDxH):	200.4 x 362 x 44.5 mm
Weight:	9.07 kg

Hardware
- Stateful firewall throughput: 250 Mbps.
- Supports approximately up to 100 users.

Cloud-based centralized management
- Managed centrally over the Web.
- Classifies applications, users and devices.
- Zero-touch, self-provisioning deployments.

Networking and security
- Stateful firewall.
- Auto VPN™ self-configuring site-to-site VPN.
- Active Directory integration.
- Identity-based policies.
- Client VPN (IPsec).
- Smart link bonding.

Traffic shaping and application management
- Layer 7 application visibility and traffic shaping.
- Application prioritization.
- Web caching.
- Choose WAN uplink based on traffic type.

WAN optimization
- Reduces intra-site bandwidth consumption.
- Accelerates CIFS, FTP, HTTP, and TCP traffic.
- WAN optimization cache: 1 TB.

Advanced security services
- Content filtering.
- Google SafeSearch and YouTube for Schools.
- Intrusion-detection (IDS).
- Antivirus and antiphishing filtering.
- Requires Advanced Security License.

Specs
Data transmission:
Firewall throughput:	250 Mbit/s
Network:
Number of VPN connections:	50
Number of users:	100 user(s)
DHCP server:	✓
DHCP client:	✓
Quality of Service (QoS) support:	✓
Security:
Security algorithms:	802.1x RADIUS,WEP,WPA,WPA2-PSK
VPN support:	IPsec
Ports & interfaces:
Connectivity technology:	Wired
USB 2.0 ports quantity:	1
Ethernet LAN (RJ-45) ports:	5
Storage:
Storage media type:	HDD
HDD capacity:	1000 GB
Number of HDDs installed:	1
Total storage capacity:	1000 GB
Design:
Rack mounting:	✓
Form factor:	1U
Power:
AC input voltage:	100-230 V
AC input frequency:	50 - 60 Hz
Power consumption (typical):	32 W
Operational conditions:
Operating temperature (T-T):	0 - 40 °C
Operating relative humidity (H-H):	5 - 95%
Weight & dimensions:
Dimensions (WxDxH):	483 x 254 x 44 mm
Weight:	3.6 kg