Форум программистов, компьютерный форум, киберфорум
Наши страницы
Cisco
Войти
Регистрация
Восстановить пароль
 
Рейтинг 4.81/26: Рейтинг темы: голосов - 26, средняя оценка - 4.81
Jabbson
Эксперт по компьютерным сетям
3353 / 2427 / 746
Регистрация: 03.11.2009
Сообщений: 7,759
Записей в блоге: 3
1

Сравнение моделей фаерволов Cisco ASA

20.05.2013, 17:36. Просмотров 4862. Ответов 0

CISCO ASA 5505 - 5550
Cisco ASA 5500 Series Model/LicenseCisco ASA 5505 Base / Security Plus1Cisco ASA 5510 Base / Security Plus1Cisco ASA 5520Cisco ASA 5540Cisco ASA 5550
MarketBranch Office/Small Business, Enterprise TeleworkerSMB and Small EnterpriseSmall EnterpriseMedium-Sized EnterpriseLarge Enterprise
Performance Summary     
Maximum Firewall Throughput (Mbps)150 300 450 650 1 200
Maximum 3DES/AES VPN Throughput (Mbps)2100 170 225 325 425
Maximum Site-to-Site and IPsec IKEv1 client VPN Sessions0 250 750 5 000 5 000
Maximum AnyConnect or Clientless User Sessions25 250 750 2 500 5 000
Maximum Connections10,000/25,00050,000/130,000280 000 400 000 650 000
Maximum Connections/Second4 000 9 000 12 000 25 000 36 000
Packets per Second (64 byte)85 000 190 000 320 000 500 000 600 000
Technical Summary     
Minimum Memory512 MB1 GB2 GB2 GB4 GB
Minimum System Flash128 MB256 MB256 MB256 MB256 MB
Integrated Ports8 port 10/100 switch with 2 Power over Ethernet ports5-10/100, 2-10/100/1000, 3-10/1004-10/100/1000, 1-10/1004-10/100/1000, 1-10/1008-10/100/1000, 4-GE SFP, 1-10/100
Maximum Virtual Interfaces (VLANs)3 (trunking disabled)/20 (trunking enabled)1 150 200 400
SSP/SSM/SSC/IEC Expansion SlotYes (1-SSC)Yes (1-SSM)Yes (1-SSM)Yes (1-SSM)Not Available
SSC/SSM/IEC Capabilities     
SSP/SSM/SSC/IEC SupportedAIP SSCCSC SSM, AIP SSM, 4GE SSMCSC SSM, AIP SSM, 4GE SSMCSC SSM, AIP SSM, 4GE SSMNot Available
Intrusion PreventionYes (with AIP SSC)Yes (with AIP SSM)Yes (with AIP SSM)Yes (with AIP SSM)Not Available
Maximum Firewall and IPS Throughput (Mbps)75 (with AIP SSC-5)150 (with AIP SSM-10)300 (with AIP SSM-20)225 (with AIP SSM-10)375 (with AIP SSM-20)450 (with AIP SSM-40)500 (with AIP SSM-20)650 (with AIP SSM-40)Not Available
Content Security (Antivirus, Anti-Spyware, File Blocking, Anti-Spam, Anti-Phishing, and URL Filtering)Not AvailableYes (with CSC SSM)Yes (with CSC SSM)Yes (with CSC SSM)Not Available
Maximum Number of Users for Antivirus, Anti- Spyware,File Blocking (CSC-SSM Only)Not Available500 (CSC SSM-10) 1000 (CSC SSM-20)500 (CSC SSM-10) 1000 (CSC SSM-20)500 (CSC SSM-10) 1000 (CSC SSM-20)Not Available
CSC SSM Plus License FeaturesNot AvailableAnti-spam, Anti-phishing, URL filteringAnti-spam, Anti-phishing, URL filteringAnti-spam, Anti-phishing,URL filteringNot Available
Features     
Application-Layer SecurityYesYesYesYesYes
Layer 2 Transparent FirewallingYesYesYesYesYes
Security Contexts (Included/Maximum1)0/00/0/2/50 0 0
GTP/GPRS Inspection1Not AvailableNot AvailableYesYesYes
High-Availability Support3Not Available/Stateless A/SNot Available/A/A and A/SA/A and A/SA/A and A/SA/A and A/S
VPN Clustering and Load BalancingNot AvailableNot Available/YesYesYesYes
CISCO ASA 5580 - 5585-X
Cisco ASA 5500 Series Model/LicenseCisco ASA 5580-20Cisco ASA 5580-40Cisco ASA 5585-X SSP-10Cisco ASA 5585-X SSP-20Cisco ASA 5585-X SSP-40Cisco ASA 5585-X SSP-60
MarketLarge Enterprise, Data CenterLarge Enterprise, Data CenterLarge EnterpriseLarge Enterprise, Data CenterLarge Enterprise, Data CenterLarge Enterprise, Data Center
Performance Summary      
Firewall Throughput (max1)10 Gbps20 Gbs4 Gbps10 Gbps20 Gbps40 Gbps
Firewall Throughput5 Gbps (real-world HTTP)10 Gbps (real-world HTTP)2 Gbps (multi-protocol)5 Gbps (multi-protocol)10 Gbps (multi-protocol)20 Gbps (multi-protocol)
Maximum 3DES/AES VPN2 Throughput21 Gbps1 Gbps1 Gbps2 Gbps3 Gbps5 Gbps
Maximum Site-to-Site and IPsec IKEv1 client VPN User Sessions10 000 10 000 5 000 10 000 10 000 10 000
Maximum AnyConnect or Clientless VPN User      
Sessions10 000 10 000 5 000 10 000 10 000 10 000
Maximum Connections2 000 000 4 000 000 1 000 000 2 000 000 4 000 000 10 000 000
Maximum Connections/Second90 000 150 000 50 000 125 000 200 000 350 000
Packets per Second (64 byte)2 500 000 4 000 000 1 500 000 3 000 000 5 000 000 9 000 000
Technical Summary      
Minimum Memory8 GB12 GB6 GB12 GB12 GB24 GB
Minimum System Flash1 GB1 GB2 GB2 GB2 GB2 GB
Integrated Ports2-10/100/1000 Mgmt2-10/100/1000 Mgmt8-10/100/1000, 2-10GE3 (SSP-10) 16-10/100/1000, 4-10GE3 (SSP-10 and IPS SSP-10)8- 10/100/1000, 2-10GE3 SFP+(SSP-20) 16-10/100/1000, 4-10GE3 SFP+(SSP-20 and IPS SSP-20)6- 10/100/10 00, 4-10GE SFP+(SSP-40) 12-10/100/1000, 8-10GE SFP+(SSP-40 and IPS SSP-40) 6-10/100 1000, 4-10GE SFP+(SSP-60) 12-10/100/1000, 8-10GE SFP+(SSP-60 and IPS SSP-60)
Maximum Virtual Interfaces (VLANs)1 024 1 024 1 024 1 024 1 024 1 024
SSP/IEC Expansion SlotYes (6-IEC)Yes (6-IEC)Yes (1-IPS-SSP)Yes (1-IPS-SSP)Yes (1-IPS-SSP)Yes (1-IPS-SSP)
SSP/IEC Capabilities      
SSP/IEC Supported4-10/100/1000, 4-GE SR LC, 2-10GE SR LC4-10/100/1000, 4-GE SR LC, 2-10GE SR LCSSP, IPS SSPSSP, IPS SSPSSP, IPS SSPSSP, IPS SSP
Intrusion PreventionNot AvailableNot AvailableYes (with IPS SSP)Yes (with IPS SSP)Yes (with IPS SSP)Yes (with IPS SSP)
Maximum Firewall and IPS ThroughputNot AvailableNot Available2 Gbps (with IPS SSP-10)3 Gbps (with IPS SSP-20)5 Gbps (with IPS SSP-40)10 Gbps (with IPS SSP-60)
Features      
Application-Layer SecurityYesYesYesYesYesYes
Layer 2 Transparent FirewallingYesYesYesYesYesYes
Security Contexts (Included/ Maximum)30 0 0 0 0 0
GTP/GPRS Inspection3YesYesYesYesYesYes
High-Availability Support4A/A and A/SA/A and A/SA/A and A/SA/A and A/SA/A and A/SA/A and A/S
VPN Clustering and Load BalancingYesYesYesYesYesYes
CISCO ASA 5512-X - 5555-X
Cisco ASA 5505-X Series Model/LicenseASA 5512-XASA 5515-XASA 5525-XASA 5545-XASA 5555-X
Next-Generation Firewall     
Stateful Inspection throughput (max1)1 Gbps1.2 Gbps2 Gbps3 Gbps4 Gbps
Stateful Inspection throughput (Multi-Protocol2)500 Mbps600 Mbps1 Gbps1.5 Gbps2 Gbps
Concurrent Sessions100 000 250 000 500 000 750 000 1 000 000
Connections per second10 000 15 000 20 000 30 000 50 000
Packets/Second (64-byte)450 000 500 000 700 000 900 000 1 100 000
VLANs50 100 200 300 500
ASA OS64-bit    
Cisco ASA Next-Generation Firewall Services     
Next-Generation Throughput3 (Multi-Protocol)200 Mbps350 Mbps650 Mbps1 Gbps1.4 Gbps
Cisco Cloud Web Security     
Cisco Cloud Web Security users100 250 500 1 500 3 000
IPS     
Intrusion PreventionYes (no hardware module required)    
Firewall + IPS Throughput250 Mbps400 Mbps600 Mbps900 Mbps1.3 Gbps
VPN     
3DES/AES VPN Throughput200 Mbps250 Mbps300 Mbps400 Mbps700 Mbps
Site-to-Site and IPSec IKEv1 Client VPN User Sessions250 250 750 2 500 5 000
Cisco AnyConnect® or Clientless VPN User Sessions250 250 750 2 500 5 000
Bundled SSL VPN User Sessions2 2 2 2 2
Hardware     
CPUMulticore, enterprise-grade    
Memory (RAM)4 GB8 GB8 GB12 GB16 GB
Flash4 GB8 GB8 GB8 GB8 GB
SSD (Solid State Drive)1 slot, 120 GB MLC SED1 slot, 120 GB MLC1 slot, 120 GB MLC2 slots with RAID1,120 GB MLC SED2 slots with RAID1
Integrated Network (GE) Ports6 6 8 8 8
Dedicated Management (GE) PortYesYesYesYesYes
Maximum Network Ports12 12 14 14 14
Interface Card Slots1 1 1 1 1
Interface Card Options6-port 10/100/1000, 6-port GE SFP SX, LH, LX    
USB 2.0 Ports2 2 2 2 2
Serial Console1 1 1 1 1
Redundant PowerNoNoNoYesYes
Power Supply TypeAC or DCAC or DCAC or DCAC or DCAC or DC
Physical Specifications     
Form Factor1 RU, 19-in. rack-mountable    
Rack-mounting optionsBrackets included (slide rails optional)  Slide rails included 
Dimensions (H x W x D)1.67 x 16.7 x 15.6 in. (4.24 x 42.9 x 39.5 cm)  1.67 x 16.7 x 19.1 in. (4.24 x 42.9 x 48.4 cm) 
Weight13.39 lb (6.07 kg) (AC power supply) 13.7 lb (6.2 kg) (DC power supply)13.39 lb (6.07 kg) (AC power supply) 13.7 lb (6.2 kg) (DC power supply)14.92 lb (6.77 kg) (AC power supply)16.82 lb (7.63 kg) with single AC power supply, 18.86 lb (8.55 Kg)with dual AC power supply 
0
Similar
Эксперт
41792 / 34177 / 6122
Регистрация: 12.04.2006
Сообщений: 57,940
20.05.2013, 17:36
Ответы с готовыми решениями:

Cisco ASA-5505 + Cisco AnyConnect + интернет от Megafon
Здравствуйте, коллеги! Подскажите пожалуйста, где рыть? Ситуация: в СПб стоит...

Есть ли Cisco Feature Navigator, для Cisco ASA?
Добрый день. Меня интересует вопрос, есть ли Cisco Feature Navigator, для Cisco...

Cisco ASA<->Cisco Router L2L VPN
Добрый день. Столкнулся с проблемой - не поднимается туннель между ASAv4 и R....

Cisco ASA-SM
Доброго времени суток! Необходимо руководство по монтажу сервисного модуля...

Cisco ASA CX
Привет всем. А на ASA CX уже установлен Prime Manager, или его надо отдельно...

0
MoreAnswers
Эксперт
37091 / 29110 / 5898
Регистрация: 17.06.2006
Сообщений: 43,301
20.05.2013, 17:36

Cisco ASA 5510
Добрый день всем. Не имею достаточного опыта в настройках Cisco ASA, поэтому...

Cisco ASA CX + IPS?
Добрый день! А я вот вычитал, что в software 9.2 появилась возможность...

Cisco Asa 5505
Объясните, пожалуйста разницу http://network.msk.ru/catalog/asa5505_series...


Искать еще темы с ответами

Или воспользуйтесь поиском по форуму:
1
Закрытая тема Создать тему
Опции темы

КиберФорум - форум программистов, компьютерный форум, программирование
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Рейтинг@Mail.ru