Cisco Cisco Catalyst 6500 Series Firewall Services Module 数据表

Data Sheet

Page 1 of 12

Cisco Firewall Services Module for Cisco Catalyst
6500 Series and Cisco 7600 Series

Figure 1. Cisco Catalyst 6500 Series and 7600 Series Firewall Services Module

The Cisco

Firewall Services Module (FWSM) for Cisco Catalyst

6500 Series switches and

Cisco 7600 Series routers is a high-performance, integrated stateful inspection firewall with

application and protocol inspection engines. It provides upto 5.5 Gbps of throughput, 100,000 new

connections per second, one million concurrent connections or 256,000 NAT translations and upto

80,000 Access Control List Entries. Up to four FWSMs can be installed in a single chassis,

providing scalability up to 20 Gbps per chassis. As an extension to the Cisco PIX

/ASA family of

security appliances, the FWSM provides large enterprises and service providers with superior

security, performance, and reliability.

Based on Cisco PIX/ASA firewall technology, the FWSM is a hardened, embedded system that

eliminates security holes and performance-degrading overhead. The Cisco FWSM tracks the

state of all network communications and prevents unauthorized network access. It delivers

strong application-layer security through intelligent, application-aware inspection engines that

examine network flows at Layers 4–7, including market-leading protection for voice over IP (VoIP),

multimedia, instant messaging, and peer-to-peer applications.

Flexible Management Options

The Cisco FWSM is managed by the integrated Cisco PIX Device Manager (PDM) for the

Cisco FWSM Software v2.3 or earlier, or by the Cisco Adaptive Security Device Manager (ASDM)

for Cisco FWSM Software v3.1 or later for device and policy configuration, monitoring, and

troubleshooting of a single FWSM. Cisco PDM can be launched from the CiscoWorks CiscoView

Device Manager (CVDM) for device provisioning of Cisco Catalyst switches and other services

modules. The Cisco FWSM can also be managed from centralized, scalable, multidevice policy-

based management tools, including CiscoWorks VPN/Security Management Solution (VMS);

the Cisco Security Manager; and the Cisco Security Monitoring, Analysis, and Response System

(MARS). Together with other security devices, these central management tools manage the

FWSM throughout the network in a consistent manner to best expedite large security deployments.