Cisco Cisco ASA 5580 Adaptive Security Appliance 백서
Key Findings and Conclusions:
Competitive Testing Note: The tests and test methodology that produced these results were proposed by, co-
developed with and/or influenced by the vendor sponsoring this comparative review. Miercom assured their fair and
accurate application. These are not the only tests or results that should guide a product selection or purchase.
developed with and/or influenced by the vendor sponsoring this comparative review. Miercom assured their fair and
accurate application. These are not the only tests or results that should guide a product selection or purchase.
•
The Cisco ASA 5520 performed more than six
times better in throughput than the competitive
solutions in real-world multi-function threat
mitigation
solutions in real-world multi-function threat
mitigation
• The Cisco ASA 5520 delivered over three times
more 3DES-encrypted VPN throughput than
competitors when tested using real-world traffic
competitors when tested using real-world traffic
•
The Cisco ASA 5520 scored 100 percent overall
threat-detection success; competitors averaged
only 30 to 40 percent
only 30 to 40 percent
• The Cisco ASA 5520 demonstrated the highest
connection-establishment rate, surpassing the
closest competitor by more than four times, in
real-world, multi-function, threat-mitigation
performance comparisons
closest competitor by more than four times, in
real-world, multi-function, threat-mitigation
performance comparisons
isco Systems
engaged Miercom to independently test the
Cisco ASA 5520 Adaptive Security Appliance against several
other comparable, competitive Unified Threat Management
other comparable, competitive Unified Threat Management
C
(UTM) security appliances – the Check Point® VPN-1® Pro, the
Fortinet® FortiGate
Fortinet® FortiGate
1000, and Juniper Networks® NetScreen-208.
Performance areas examined included: unified firewall and IPS
throughput performance, VPN throughput performance, IPS threat-
prevention capability; and connections-per-second performance.
throughput performance, VPN throughput performance, IPS threat-
prevention capability; and connections-per-second performance.
Firewall Performance (Mbps) with All Attack/Virus
Signatures Enabled, 16-Kbyte HTTP Object Size
0
50
100
150
200
250
300
350
Cisco
ASA 5520
Juniper
NetScreen-208
Check Point
VPN-1 Pro
Fortinet
FortiGate 1000
The Cisco ASA 5520 demonstrated significantly higher throughput with
real-world traffic and 16-Kbyte object sizes, with all threat signatures enabled
real-world traffic and 16-Kbyte object sizes, with all threat signatures enabled
Lab Testing
Summary
Report
October 2005
Report 050914
Product Category:
Unified Threat
Management (UTM)
Security Appliances
Systems Tested:
Cisco Systems
ASA 5520
Check Point
VPN-1
Pro
Fortinet
FortiGate
1000
Juniper Networks
NetScreen-208