Cisco ASA 5520 Model

Cisco ASA 5520 provides security services for medium-sized enterprises. The Cisco ASA 5520 and 5540 models are similar to the Cisco ASA 5510 model. They are all 1RUs, and the chassis external layouts are similar with the exception of the interfaces. The Cisco ASA 5520 and ASA 5540 models have four Gigabit Ethernet (10/100/1000) copper-based RJ-45 ports instead of the four Fast Ethernet ports in the Cisco ASA 5510 model. They also include a Fast Ethernet port for OOB management. Virtualization (security contexts) is supported in the Cisco ASA 5520 and 5540 models.

Figure 3-3 illustrates the front view of the Cisco ASA 5520 model.

Figure 3-3. Cisco ASA 5520 Front View

The front panel has the following five LEDs:

  1. Power Solid green indicates that the appliance is powered on.
  2. Status Flashing green indicates that the system is booting and power-up tests are running. Solid green indicates that the system tests passed and the system is operational. Amber solid indicates that the system tests failed.
  3. Active Flashing green indicates network activity.
  4. VPN Solid green indicates that one or more VPN tunnels are active.
  5. Flash Solid green indicates that the Flash memory card is being accessed.

Figure 3-4 illustrates the back view of the Cisco ASA 5520 model.

Figure 3-4. Cisco ASA 5520 Back View

The back view of ASA 5520 is identical to that of ASA 5510, except that the Cisco ASA 5520 has four Gigabit Ethernet (10/100/1000) ports whereas the Cisco ASA 5510 has four Fast Ethernet ports.

With the installation of a VPN Plus upgrade license, Cisco ASA 5520 can terminate up to 750 IPSec or WebVPN tunnels.

Table 3-2 lists the capabilities of the Cisco ASA 5520 appliance and its performance and connection limit numbers.

Table 3-2. Cisco ASA 5520 Model Capabilities

Description

Without VPN Plus License

With VPN Plus License

Firewall throughput

Up to 450 Mbps

Up to 450 Mbps

3DES/AES IPSec VPN throughput

Up to 225 Mbps

Up to 225 Mbps

Connections

130,000

130,000

IPSec VPN peers

300

750

WebVPN peers

300

750

Interfaces

Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management

Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management

Virtual interfaces (VLANs)

25

25

High availability

Active/Active and Active/Standby

Active/Active and Active/Standby

VPN scalability

VPN clustering and load balancing

VPN clustering and load balancing

Threat mitigation throughput (IPS, firewall, and Anti-X)

Up to 225 Mbps with AIP-SSM-10

Up to 375 Mbps with AIP-SSM-20

Up to 225 Mbps with AIP-SSM-10

Up to 375 Mbps with AIP-SSM-20

Security contexts

Up to 10

Up to 10

Note

Performance numbers vary depending on the packet size and other applications running on the appliance.

Note

For more information about licensing, go to http://www.cisco.com/go/asa.


Part I: Product Overview

Introduction to Network Security

Product History

Hardware Overview

Part II: Firewall Solution

Initial Setup and System Maintenance

Network Access Control

IP Routing

Authentication, Authorization, and Accounting (AAA)

Application Inspection

Security Contexts

Transparent Firewalls

Failover and Redundancy

Quality of Service

Part III: Intrusion Prevention System (IPS) Solution

Intrusion Prevention System Integration

Configuring and Troubleshooting Cisco IPS Software via CLI

Part IV: Virtual Private Network (VPN) Solution

Site-to-Site IPSec VPNs

Remote Access VPN

Public Key Infrastructure (PKI)

Part V: Adaptive Security Device Manager

Introduction to ASDM

Firewall Management Using ASDM

IPS Management Using ASDM

VPN Management Using ASDM

Case Studies



Cisco Asa(c) All-in-one Firewall, IPS, And VPN Adaptive Security Appliance
Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance
ISBN: 1587052091
EAN: 2147483647
Year: 2006
Pages: 231

Flylib.com © 2008-2020.
If you may any questions please contact us: flylib@qtcs.net