Cisco ASA 5520 Model

Cisco ASA 5520 provides security services for medium-sized enterprises. The Cisco ASA 5520 and 5540 models are similar to the Cisco ASA 5510 model. They are all 1RUs, and the chassis external layouts are similar with the exception of the interfaces. The Cisco ASA 5520 and ASA 5540 models have four Gigabit Ethernet (10/100/1000) copper-based RJ-45 ports instead of the four Fast Ethernet ports in the Cisco ASA 5510 model. They also include a Fast Ethernet port for OOB management. Virtualization (security contexts) is supported in the Cisco ASA 5520 and 5540 models.

Figure 3-3 illustrates the front view of the Cisco ASA 5520 model.

Figure 3-3. Cisco ASA 5520 Front View

The front panel has the following five LEDs:

1. Power Solid green indicates that the appliance is powered on.
2. Status Flashing green indicates that the system is booting and power-up tests are running. Solid green indicates that the system tests passed and the system is operational. Amber solid indicates that the system tests failed.
3. Active Flashing green indicates network activity.
4. VPN Solid green indicates that one or more VPN tunnels are active.
5. Flash Solid green indicates that the Flash memory card is being accessed.

Figure 3-4 illustrates the back view of the Cisco ASA 5520 model.

Figure 3-4. Cisco ASA 5520 Back View

The back view of ASA 5520 is identical to that of ASA 5510, except that the Cisco ASA 5520 has four Gigabit Ethernet (10/100/1000) ports whereas the Cisco ASA 5510 has four Fast Ethernet ports.

With the installation of a VPN Plus upgrade license, Cisco ASA 5520 can terminate up to 750 IPSec or WebVPN tunnels.

Table 3-2 lists the capabilities of the Cisco ASA 5520 appliance and its performance and connection limit numbers.

Table 3-2. Cisco ASA 5520 Model Capabilities

Description	Without VPN Plus License	With VPN Plus License
Firewall throughput	Up to 450 Mbps	Up to 450 Mbps
3DES/AES IPSec VPN throughput	Up to 225 Mbps	Up to 225 Mbps
Connections	130,000	130,000
IPSec VPN peers	300	750
WebVPN peers	300	750
Interfaces	Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management	Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management
Virtual interfaces (VLANs)	25	25
High availability	Active/Active and Active/Standby	Active/Active and Active/Standby
VPN scalability	VPN clustering and load balancing	VPN clustering and load balancing
Threat mitigation throughput (IPS, firewall, and Anti-X)	Up to 225 Mbps with AIP-SSM-10 Up to 375 Mbps with AIP-SSM-20	Up to 225 Mbps with AIP-SSM-10 Up to 375 Mbps with AIP-SSM-20
Security contexts	Up to 10	Up to 10

Note

Performance numbers vary depending on the packet size and other applications running on the appliance.

Note

For more information about licensing, go to http://www.cisco.com/go/asa.