Cisco ASA 5505 SSL / IPsec VPN ASA5505-SSL10-K8 Manual De Usuario
Los códigos de productos
ASA5505-SSL10-K8
Solution Overview
All contents are Copyright © 1992–2008 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 3 of 5
Table 1.
Performance Information for Cisco ASA 5500 Series Appliances
Cisco ASA
5505
5505
Cisco ASA
5510
5510
Cisco ASA
5520
5520
Cisco ASA
5540
5540
Cisco ASA
5550
5550
Cisco ASA 5580-20
Cisco ASA 5580-40
Maximum VPN
Throughput
Throughput
100 Mbps
170 Mbps
225 Mbps
325 Mbps
425 Mbps
1 Gbps
1 Gbps
Maximum
Concurrent SSL
VPN Sessions
Concurrent SSL
VPN Sessions
1
25
250
750
2500
5000
10,000
10,000
Maximum
Concurrent IPsec
VPN Sessions
Concurrent IPsec
VPN Sessions
1
25
250
750
5000
5000
10,000
10,000
Interfaces
Eight 10/100
copper Ethernet
ports with
dynamic port
grouping
(include two
Power over
Ethernet ports),
three USB ports
copper Ethernet
ports with
dynamic port
grouping
(include two
Power over
Ethernet ports),
three USB ports
Five 10/100
copper Ethernet
ports, two USB
ports
copper Ethernet
ports, two USB
ports
Four
10/100/1000
copper Ethernet
ports, one out-
of-band
management
port, two USB
ports
10/100/1000
copper Ethernet
ports, one out-
of-band
management
port, two USB
ports
Four
10/100/1000
copper Ethernet
ports, one out-
of-band
management
port, two USB
ports
10/100/1000
copper Ethernet
ports, one out-
of-band
management
port, two USB
ports
Eight Gigabit
Ethernet ports,
four SFP fiber
ports, one Fast
Ethernet port
Ethernet ports,
four SFP fiber
ports, one Fast
Ethernet port
Two USB ports, Two RJ-45
Management ports, Two
Gigabit Ethernet
Management ports
Management ports, Two
Gigabit Ethernet
Management ports
With Interface Expansion
Cards:
Cards:
●
Up to Twelve 10Gigabit
Ethernet (10GE) ports
●
Up to Twenty-Four
Gigabit Ethernet ports
●
Up to Twenty-Four
10/100/1000 Ethernet
ports
ports
Two USB ports, Two RJ-45
Management ports, Two
Gigabit Ethernet
Management ports
Management ports, Two
Gigabit Ethernet
Management ports
With Interface Expansion
Cards:
Cards:
●
Up to Twelve 10Gigabit
Ethernet (10GE) ports
●
Up to Twenty-Four
Gigabit Ethernet ports
●
Up to Twenty-Four
10/100/1000 Ethernet
ports
ports
Profile
Desktop
1-RU
1-RU
1-RU
1-RU
4-RU
4-RU
Stateful Failover
No
Licensed
feature
feature
2
Yes
Yes
Yes
Yes
Yes
VPN Load
Balancing
Balancing
No
Licensed
feature
feature
2
Yes
Yes
Yes
Yes
Yes
Ordering Information
Tables 2 and 3 provide a subset of ordering information for the Cisco ASA 5500 Series SSL/IPsec
VPN Edition. All Cisco ASA 5500 Series appliances include maximum IPsec concurrent users in
the base configuration of the chassis. All SSL VPN features are included under a single feature
license. Every Cisco ASA 5500 Series model can support SSL VPN through the purchase of an
SSL VPN license. SSL VPN on the Cisco ASA 5500 Series may be purchased under a single part
number as an edition bundle, or the chassis and SSL VPN feature license may be purchased
separately, as indicated in Table 3. To place an order, visit the
Cisco Ordering Home Page
.
Table 2.
Ordering Information for Edition Bundles
SSL VPN User
Requirements
Requirements
Edition Bundles
Edition Bundle Part Number
10 SSL VPN Users
Cisco ASA 5505 SSL/IPsec VPN Edition for 10 concurrent SSL
VPN users
VPN users
ASA5505-SSL10-K9
25 SSL VPN Users
Cisco ASA 5505 SSL/IPsec VPN Edition for 25 concurrent SSL
VPN users
VPN users
ASA5505-SSL25-K9
50 SSL VPN Users
Cisco ASA 5510 SSL/IPsec VPN Edition for 50 concurrent SSL
VPN users
VPN users
ASA5510-SSL50-K9
100 SSL VPN Users
Cisco ASA 5510 SSL/IPsec VPN Edition for 100 concurrent SSL
VPN users
VPN users
ASA5510-SSL100-K9
1
Devices include a license for two SSL VPN users for evaluation and remote management purposes. The total
concurrent IPsec and SSL (clientless and tunnel-based) VPN sessions may not exceed the maximum
concurrent IPsec session count shown in the chart. The SSL VPN session number may also not exceed the
number of licensed sessions on the device. The ASA 5580 Series supports greater simultaneous users than
the ASA 5550 Series at comparable overall SSL VPN throughput as the ASA 5550 Series. These items should
be taken in to consideration as part of your capacity planning
concurrent IPsec session count shown in the chart. The SSL VPN session number may also not exceed the
number of licensed sessions on the device. The ASA 5580 Series supports greater simultaneous users than
the ASA 5550 Series at comparable overall SSL VPN throughput as the ASA 5550 Series. These items should
be taken in to consideration as part of your capacity planning
2
Upgrade is available with Cisco ASA 5510 Security Plus license.