Cisco Systems Pix 500 Introduction Manual
2015-01-05
: Cisco-Systems Cisco-Systems-Pix-500-Introduction-Manual-202920 cisco-systems-pix-500-introduction-manual-202920 cisco-systems pdf
Open the PDF directly: View PDF .
Page Count: 4
At-A-Glance
Upsell Guide—
Migrating Cisco PIX Requests to Cisco ASA 5500 Sales
Cisco® ASA 5500 Series Adaptive Security Appliances deliver more security
capabilities, higher performance, and greater expansion opportunities than Cisco
PIX® 500 Series Security Appliances. Migrate customers requesting a Cisco PIX
appliance to Cisco ASA 5500 appliances today to enable them to benefit from
converged, multifunction security and VPN services within a single platform.
Cisco ASA 5500 Benefits over Cisco PIX 500
Delivers a Greater Functional Set Relative to Cisco PIX 500 Series
• SSLVPNservicesincludedwitheachCiscoASA5500Seriesappliance
• High-availabilitysupportavailableonallCiscoASA5500Seriesmodels
• Additionalsecurityservicesavailable,includingAnti-XandIPS
Flexible Deployment Options
Customizedproducteditionstailoredtoaddressspecificneeds:
• FirewallEdition
• IntrusionPreventionSystem(IPS)Edition
• Anti-XEdition
• SSL/IPsecVPNEdition
Better Price and Performance Compared to Similar Cisco PIX Models
• Startingfrom150Mbpsfirewalland100MbpsIPsecVPNforenterprise
teleworkermodel
• High-performanceIPSandAnti-Xservices
• PricesstartatthesamepricepointasCiscoPIXforsimilarmodels
Questions to Migrate Cisco PIX Requests to Cisco ASA 5500 Sales
What security capabilities are you looking to add to your network? Cisco ASA 5500
Series can provide:
• Firewall:ProvidestrustedfirewallbuiltuponCiscoPIXtechnology.
• VPN:Providesthreat-protectedVPNbuiltuponCiscoVPN3000technology.
FirstsolutiontooffercomprehensiveSSLandIPsecVPNservicesonthe
sameplatform.
• Anti-X:Offerscomprehensiveantivirus,anti-spyware,fileblocking,anti-spam,anti-
phishing,URLblockingandfiltering,andcontentfilteringfeaturesthroughpartner-
shipwithTrendMicro.
• IPS:Providesproactive,full-featuredintrusionpreventionservicestostopawide
rangeofthreats.
How do you combat worms and viruses in your network?
• TheCiscoASA5500SeriesAnti-XEditionprotectsusersfromInternetthreatsand
connectsremotesitessecurelywithanti-X,firewallandVPNservices.
How do you secure remote workers who are accessing your network?
• TheCiscoASA5500Seriesprovidesfullysecured,highlycustomizableaccess
foranyuserfromanylocationonasingledeviceandmanagementinfrastructure.
How do you plan to secure your IP communications network?
• TheCiscoASA5500Seriesoffersasuiteofvoicefeatures,enablingsecurityfor
thevoiceinfrastructure,callcontrol,andendpointsforVoIPnetworks.
0 50 100 150 200 250 300 Mbps
Sample Firewall Performance Comparisons
PIX 515E
ASA 5510
PIX 501
ASA 5505
1.5x
1.5x
At-A-Glance
Upsell Guide—
Migrating Cisco PIX Requests to Cisco ASA 5500 Sales
Cisco PIX Upsell to Cisco ASA 5500 Series
Firewall IPS Anti-X VPN
Cisco PIX Security
Appliance Model
Cisco ASA 5500
Series Part Numbers
PC Connection
Part Numbers
Cisco ASA 5500 Description
Cisco PIX 501
10 Users
ASA5505-K8 7220495 CiscoASA5505FirewallEdition,10-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,DES
ASA5505-BUN-K9 7190126 CiscoASA5505FirewallEdition,10-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5505-50-BUN-K9 7190151 CiscoASA5505FirewallEdition,50-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5505-SSL10-K9 7190337 CiscoASA5505SSL/IPsecVPNEdition,10IPsecVPNand10SSLVPNpeers,firewallservices,8-portFastEthernetswitch
Cisco PIX 501
50 Users
ASA5505-50-BUN-K9 7190151 CiscoASA5505FirewallEdition,50-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5505-UL-BUN-K9 7190214 CiscoASA5505FirewallEdition,Unlimited-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5505-SSL10-K9 7190337 CiscoASA5505SSL/IPsecVPNEdition,10IPsecVPNand10SSLVPNpeers,firewallservices,8-portFastEthernetswitch
Cisco PIX 501
Unlimited Users
ASA5505-UL-BUN-K9 7190214 CiscoASA5505FirewallEdition,Unlimited-user,8-portFastEthernetswitch,10IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5505-SEC-BUN-K9 7190231 CiscoASA5505FirewallEdition,Unlimited-userSecurityPlus,8-portFastEthernetswitch,25IPsecVPNand2SSLVPNpeers,DMZ,stateless
Active/Standbyhighavailability,3DES/AES
ASA5505-SSL10-K9 7190337 CiscoASA5505SSL/IPsecVPNEdition,10IPsecVPNand10SSLVPNpeers,firewallservices,8-portFastEthernetswitch
Cisco PIX 506E ASA5505-SEC-BUN-K9 7190231 CiscoASA5505FirewallEdition,Unlimited-userSecurityPlus,8-portFastEthernetswitch,25IPsecVPNand2SSLVPNpeers,DMZ,stateless
Active/Standbyhighavailability,3DES/AES
ASA5505-SSL25-K9 7190353 CiscoASA5505SSL/IPsecVPNEdition,25IPsecVPNand25SSLVPNpeers,firewallservices,8-portFastEthernetswitch,SecurityPluslicense
ASA5510-K8 5942929 CiscoASA5510FirewallEdition,3FastEthernetports,250IPsecVPNand2SSLVPNpeers,DES
ASA5510-BUN-K9 5822708 CiscoASA5510FirewallEdition,3FastEthernetports,250IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5510-AIP10-K9 5822732 CiscoASA5510IPSEdition,AIP-SSM-10,firewallservices,250IPsecVPNand2SSLVPNpeers,3FastEthernetports
ASA5510-CSC10-K9 6519524 CiscoASA5510Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-CSC20-K9 6574136 CiscoASA5510Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-SSL50-K9 6574101 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand50SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL100-K9 6574110 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand100SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL250-K9 6574128 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand250SSLVPNpeers,firewallservices,3FastEthernetports
Cisco PIX 515E R/DMZ ASA5510-K8 5942929 CiscoASA5510FirewallEdition,3FastEthernetports,250IPsecVPNand2SSLVPNpeers,DES
ASA5510-BUN-K9 5822708 CiscoASA5510FirewallEdition,3FastEthernetports,250IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5510-SEC-BUN-K9 5822724 CiscoASA5510FirewallEdition,SecurityPlus,5FastEthernetports,250IPsecVPNand2SSLVPNpeers,Active/Standbyhighavailability,3DES/AES
ASA5510-AIP10-K9 5822732 CiscoASA5510IPSEdition,AIP-SSM-10,firewallservices,250IPsecVPNand2SSLVPNpeers,3FastEthernetports
ASA5510-CSC10-K9 6519524 CiscoASA5510Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-CSC20-K9 6574136 CiscoASA5510Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-SSL50-K9 6574101 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand50SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL100-K9 6574110 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand100SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL250-K9 6574128 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand250SSLVPNpeers,firewallservices,3FastEthernetports
At-A-Glance
Upsell Guide—
Migrating Cisco PIX Requests to Cisco ASA 5500 Sales
Cisco PIX 515E
UR/FO/FO-AA
ASA5510-SEC-BUN-K9 5822724 CiscoASA5510FirewallEdition,SecurityPlus,5FastEthernetports,250IPsecVPNand2SSLVPNpeers,Active/Standbyhighavailability,3DES/AES
ASA5510-AIP10-K9 5822732 CiscoASA5510IPSEdition,AIP-SSM-10,firewallservices,250IPsecVPNand2SSLVPNpeers,3FastEthernetports
ASA5510-CSC10-K9 6519524 CiscoASA5510Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-CSC20-K9 6574136 CiscoASA5510Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,250IPsecVPNand2SSLVPN
peers,3FastEthernetports
ASA5510-SSL50-K9 6574101 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand50SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL100-K9 6574110 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand100SSLVPNpeers,firewallservices,3FastEthernetports
ASA5510-SSL250-K9 6574128 CiscoASA5510SSL/IPsecVPNEdition,250IPsecVPNand250SSLVPNpeers,firewallservices,3FastEthernetports
Cisco PIX 520
(End of Life as of
June 2006)
ASA5520-K8 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,DES
ASA5520-BUN-K9 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,3DES/AES
ASA5520-AIP10-K9 – CiscoASA5520IPSEdition,AIP-SSM-10,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-AIP20-K9 – CiscoASA5520IPSEdition,AIP-SSM-20,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC10-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC20-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-SSL500-K9 6621351 CiscoASA5520SSL/IPsecVPNEdition,750IPsecVPNand500SSLVPNpeers,firewallservices,4GigabitEthernetports,1FastEthernetinterface
Cisco PIX 525R ASA5520-K8 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,DES
ASA5520-BUN-K9 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,3DES/AES
ASA5520-AIP10-K9 – CiscoASA5520IPSEdition,AIP-SSM-10,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-AIP20-K9 – CiscoASA5520IPSEdition,AIP-SSM-20,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC10-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC20-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-SSL500-K9 6621351 CiscoASA5520SSL/IPsecVPNEdition,750IPsecVPNand500SSLVPNpeers,firewallservices,4GigabitEthernetports,1FastEthernetinterface
Cisco PIX 525
UR/FO/FO-AA
ASA5520-K8 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,DES
ASA5520-BUN-K9 – CiscoASA5520FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,750IPsecVPNand2SSLVPNpeers,Active/Activeand
Active/Standbyhighavailability,3DES/AES
ASA5520-AIP10-K9 – CiscoASA5520IPSEdition,AIP-SSM-10,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-AIP20-K9 – CiscoASA5520IPSEdition,AIP-SSM-20,firewallservices,750IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC10-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-10,50-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
ASA5520-CSC20-K9 – CiscoASA5520Anti-XEdition,CSC-SSM-20,500-userantivirus/anti-spywarewith1-yrsubscription,firewallservices,750IPsecVPNand2SSLVPN
peers,4GigabitEthernetports,1FastEthernetinterface
At-A-Glance
Upsell Guide—
Migrating Cisco PIX Requests to Cisco ASA 5500 Sales
ASA5520-SSL500-K9 6621351 CiscoASA5520SSL/IPsecVPNEdition,750IPsecVPNand500SSLVPNpeers,firewallservices,4GigabitEthernetports,1FastEthernetinterface
ASA5540-K8 6605511 CiscoASA5540FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,5000IPsecVPNand2SSLVPNpeers,DES
ASA5540-BUN-K9 5822783 CiscoASA5540FirewallEdition,4GigabitEthernetports+1FastEthernetinterface,5000IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5540-AIP20-K9 5822804 CiscoASA5540IPSEdition,AIP-SSM-20module,Firewallservices,5000IPsecVPNand2SSLVPNpeers,4GigabitEthernetports,1FastEthernetinterface
ASA5540-SSL1000-K9 6653547 CiscoASA5540SSL/IPsecVPNEdition,5000IPsecVPNand1000SSLVPNpeers,firewallservices,4GigabitEthernetports,1FastEthernetinterface
ASA5540-SSL2500-K9 6653555 CiscoASA5540SSL/IPsecVPNEdition,5000IPsecVPNand2500SSLVPNpeers,firewallservices,4GigabitEthernetports,1FastEthernetinterface
Cisco PIX 535 ASA5550-K8 6772781 CiscoASA5550FirewallEdition,8GigabitEthernetports+1FastEthernetinterface,4GigabitSFPports,5000IPsecVPNand2SSLVPNpeers,DES
ASA5550-BUN-K9 6772802 CiscoASA5550FirewallEdition,8GigabitEthernetports+1FastEthernetinterface,4GigabitSFPports,5000IPsecVPNand2SSLVPNpeers,3DES/AES
ASA5550-SSL2500-K9 6772811 CiscoASA5550SSL/IPsecVPNEdition,5000IPsecVPNand2500SSLVPNpeers,firewallservices,8GigabitEthernetports,1FastEthernetinterface
ASA5550-SSL5000-K9 6772829 CiscoASA5550SSL/IPsecVPNEdition,5000IPsecVPNand5000SSLVPNpeers,firewallservices,8GigabitEthernetports,1FastEthernetinterface
Product Specifications
Cisco ASA 5505 Cisco ASA 5510 Cisco ASA 5520 Cisco ASA 5540 Cisco ASA 5550
Users and nodes 10,50,orunlimited Unlimited Unlimited Unlimited Unlimited
Firewall throughput Upto150Mbps Upto300Mbps Upto450Mbps Upto650Mbps Upto1.2Gbps
Concurrent threat
mitigation throughput
(firewall + IPS services)
Notavailable Upto150MbpswithCiscoASA
5500SeriesAdvancedInspection
andPreventionSecurityServices
Module(AIPSSM)10(partnumber
AIP-SSM-10);Upto300Mbpswith
CiscoASA5500SeriesAIPSSM20
(partnumberAIP-SSM-20)
Upto225MbpswithAIP-SSM-10;
Upto375MbpswithAIP-SSM-20
Upto450MbpswithAIP-SSM-20 Notavailable
3DES/AES VPN throughput Upto100Mbps Upto170Mbps Upto225Mbps Upto325Mbps Upto360Mbps
IPsec VPN peers 10;25* 250 750 5000 5000
SSL VPN peers*
(included/maximum)
2/25 2/250 2/750 2/2500 2/5000
Concurrent sessions 10,000;25,000* 50,000;130,000* 280,000 400,000 650,000
New sessions per second 3,000 6,000 9,000 20,000 28,000
Integrated network ports 8-portFastEthernetswitch
(including2PoEports)
5FastEthernetports 4GigabitEthernetportsplus
1FastEthernetport
4GigabitEthernetportsplus
1FastEthernetport
8GigabitEthernetports,SFPfiber,
and1FastEthernetport
Virtual interfaces (VLANs) 3(trunkingdisabled)/
20*(trunkingenabled)
50/100* 150 200 250
Security contexts
(included/maximum)
0/0 0/0(Base);2/5(SecurityPlus) 2/20 2/50 2/50
High availability Notsupported;
statelessActive/Standby*
Notsupported;Active/Activeand
Active/Standby*
Active/ActiveandActive/Standby Active/ActiveandActive/Standby Active/ActiveandActive/Standby
Expansion slot 1,SSC 1,SSM 1,SSM 1,SSM 0
*Availablethroughanupgradelicense
Copyright © 2007 Cisco Systems, Inc. All rights reserved. Cisco, Cisco IOS, Cisco Systems, and the Cisco Systems logo are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. C45-388594-00 01/07
ACRONYMS
SSC:SecurityServicesCard,SSM:SecurityServicesModule,AIP-SSM:AdvancedInspectionandPreventionSecurityServicesModule,CSC-SSM:ContentSecurityandControlSecurityServicesModule,4GE-SSM: 4GigabitEthernetSecurityServicesModule