Summary

The Cisco ASA product line offers an extensive list of security features in a single appliance, including firewall, antispoofing, protocol inspection, VPN, IPS, content security, and control security. IPS, content security, and control security are implemented as a hardware security services module (AIP-SSM and CSC-SSM). The CSC-SSM module implements advanced security functions, including antivirus, antispam, antiphishing, URL filtering and blocking, and file transfer scanning and blocking. The extensible architecture of the ASA product line, combined with the partnership with Trend Micro on the Content Security and Control Security Service Module (CSC-SSM), enable the ASA product to be the platform for future security innovations.

The different footprint, capacity, and price points of the ASA product line enable the ASA to be used in both remote branches and the data center. ASA features an easy-to-use device manager, ASDM, that allows new users to get up-to-speed quickly on configuring the ASA. ASA is also centrally managed by the Cisco Security Manager, which enables hundreds of ASA appliances to be managed with thousands of routers for a single view of security configuration, integration, and enforcement between these two platforms. The Cisco Security Manager can also centrally manage the IPS signature configuration on the ASA AIP-SSM module along with other Cisco IPS devices.