Cisco Cisco ASA 5525-X Adaptive Security Appliance - No Payload Encryption 릴리즈 노트
6
Release Notes for Cisco ASA 5500 Version 7.2(5)
OL-22745-01
System Requirements
Security Contexts
No support
No support
VPN Sessions
2
10 combined IPSec and WebVPN
25 combined IPSec and WebVPN
Max. IPSec Sessions
10
25
Max. WebVPN
Sessions
Sessions
2
Optional License: 10
2
Optional License: 10
VPN Load Balancing
No support
No support
Failover
None
Active/Standby (no stateful failover)
GTP/GPRS
No support
No support
Maximum VLANs/Zones
3 (2 regular zones and 1 restricted zone that
can only communicate with 1 other zone)
can only communicate with 1 other zone)
20
Maximum VLAN Trunks
No support
Unlimited
Concurrent Firewall Conns
3
10 K
25 K
Max. Physical Interfaces
Unlimited, assigned to VLANs/zones
Unlimited, assigned to VLANs/zones
Encryption
Base (DES)
Optional license:
Strong (3DES/AES)
Strong (3DES/AES)
Base (DES)
Optional license:
Strong (3DES/AES)
Strong (3DES/AES)
Minimum RAM
256 MB
256 MB
1.
In routed mode, hosts on the inside (Business and Home VLANs) count towards the limit only when they communicate with the outside (Internet VLAN).
Internet hosts are not counted towards the limit. Hosts that initiate traffic between Business and Home are also not counted towards the limit. The interface
associated with the default route is considered to be the Internet interface. If there is no default route, hosts on all interfaces are counted toward the limit.
In transparent mode, the interface with the lowest number of hosts is counted towards the host limit. See the show local-host command to view the host
limits.
Internet hosts are not counted towards the limit. Hosts that initiate traffic between Business and Home are also not counted towards the limit. The interface
associated with the default route is considered to be the Internet interface. If there is no default route, hosts on all interfaces are counted toward the limit.
In transparent mode, the interface with the lowest number of hosts is counted towards the host limit. See the show local-host command to view the host
limits.
2.
Although the maximum IPSec and WebVPN sessions add up to more than the maximum VPN sessions, the combined sessions should not exceed the VPN
session limit. If you exceed the maximum VPN sessions, you can overload the adaptive security appliance, so be sure to size your network appropriately.
session limit. If you exceed the maximum VPN sessions, you can overload the adaptive security appliance, so be sure to size your network appropriately.
3.
The concurrent firewall connections are based on a traffic mix of 80% TCP and 20% UDP, with one host and one dynamic translation for every four
connections.
connections.
Table 6
ASA 5510 Adaptive Security Appliance License Features
ASA 5510
Base License
Security Plus
Users, concurrent
Unlimited
Unlimited
Security Contexts
No support
2
Optional Licenses:
5
VPN Sessions
1
250 combined IPSec and WebVPN
250 combined IPSec and WebVPN
Max. IPSec Sessions
250
250
Max. WebVPN
Sessions
Sessions
2
Optional Licenses:
2
Optional Licenses:
10
25
50
100
250
10
25
50
100
250
VPN Load Balancing
No support
No support
Failover
None
Active/Standby or Active/Active
GTP/GPRS
No support
No support
Max. VLANs
50
100
Table 5
ASA 5505 Adaptive Security Appliance License Features (continued)
ASA 5505
Base License
Security Plus