Guest

Cisco ASA 5500 Series Adaptive Security Appliances

Compare Models

Hierarchical Navigation
Cisco ASA 5500 Series Model/License Cisco ASA 5580-20 Cisco ASA 5580-40 Cisco ASA 5585-X with SSP-10 Cisco ASA 5585-X with SSP-20 Cisco ASA 5585-X with SSP-40 Cisco ASA 5585-X with SSP-60
Product Image
(click to enlarge)
Network Location Data Center, Campus Data Center, Campus Internet Edge, Campus Data Center, Campus Data Center, Campus Data Center, Campus
Performance Summary  
Firewall Throughput1 5 Gbps (real-world HTTP), 10 Gbps (max) 10 Gbps (real-world HTTP), 20 Gbps (max) 2 Gbps (multi-protocol), 4 Gbps (max) 5 Gbps (multi-protocol), 10 Gbps (max) 10 Gbps (multi-protocol), 20 Gbps (max) 20 Gbps (multi-protocol), 40 Gbps (max)
Maximum Firewall Connections 2,000,000 4,000,000 1,000,000 2,000,000 4,000,000 10,000,000
Maximum Firewall Connections/Second 90,000 150,000 50,000 125,000 200,000 350,000
Packets per second (64 byte) 2,500,000 4,000,000 1,500,000 3,000,000 5,000,000 9,000,000
Maximum 3DES/AES VPN Throughput2 1 Gbps 1 Gbps 1 Gbps 2 Gbps 3 Gbps 5 Gbps
Maximum Site-to-Site and IPsec IKEv1 Client VPN User Sessions 10,000 10,000 5,000 10,000 10,000 10,000
Maximum AnyConnect or Clientless VPN User Sessions 10,000 10,000 5,000 10,000 10,000 10,000
Bundled SSL VPN User Sessions 2 2 2 2 2 2
Technical Summary  
Memory 8 GB 12 GB 6 GB (SSP-10)
12 GB (SSP-10 and IPS SSP-10)		 12 GB (SSP-20)
24 GB (SSP-20 and IPS SSP-20)		 12 GB (SSP-40)
36 GB (SSP-40 and IPS SSP-40)		 24 GB (SSP-60)
72 GB (SSP-60 and IPS SSP-60)
Minimum System Flash 1 GB 1 GB 2 GB 2 GB 2 GB 2 GB
Integrated Ports 2-10/100/1000 management

+4-10/100/1000 (with ASA5580-4 GE-CU)

+4 GE SR (with ASA5580-4 GE-FI)

+2 10 GE SR (with ASA5580-2X10 GE-SR)		 2-10/100/1000 management

+4-10/100/1000 (with ASA5580-4 GE-CU)

+4 GE SR (with ASA5580-4 GE-FI)

+2 10 GE SR (with ASA5580-2X10 GE-SR)		 8-10/100/1000, 2-10 GE SFP+ (with ASA5585-Sec-Pl license), 2-10/100/1000 management

+ 8-10/100/1000, 2-10 GE SFP+, 2-10/100/1000 management (with IPS SSP-10)		 8-10/100/1000, 2-10 GE SFP+ (with ASA5585-Sec-Pl license), 2-10/100/1000 management

+ 8-10/100/1000, 2-10 GE SFP+, 2-10/100/1000 management (with IPS SSP-20)		 6-10/100/1000, 4-10 GE SFP+, 2-10/100/1000 management

+ 6-10/100/1000, 4-10 GE SFP+, 2-10/100/1000 management (with IPS SSP-40)		 6-10/100/1000, 4-10 GE SFP+, 2-10/100/1000 management

+ 6-10/100/1000, 4-10 GE SFP+, 2-10/100/1000 management (with IPS SSP-60)
Maximum Virtual Interfaces (VLANs) 1024 1024 1024 1024 1024 1024
Expansion Capabilities  
SSP Expansion Not available Not available 1- IPS SSP 1- IPS SSP 1-IPS SSP 1-IPS SSP
SSP Supported Not available Not available IPS SSP-10 IPS SSP-20 IPS SSP-40 IPS SSP-60
Intrusion Prevention Not available Not available Yes (with IPS SSP) Yes (with IPS SSP) Yes (with IPS SSP) Yes (with IPS SSP)
Concurrent Threat Mitigation Throughput (Mbps) (Firewall + IPS Services) Not available Not available 2 Gbps 3 Gbps 5 Gbps 10 Gbps
Features  
Cisco Adaptive Security Appliance Software Version (latest) 8.4 8.4 8.4 8.4 8.4 8.4
Application-Layer Firewall Services Yes Yes Yes Yes Yes Yes
Layer 2 Transparent Firewalling Yes Yes Yes Yes Yes Yes
Security Contexts (included/maximum3) 2/250 2/250 2/100 2/250 2/250 2/250
GTP/GPRS Inspection3 Yes Yes Yes Yes Yes Yes
High-Availability Support4 A/A and A/S A/A and A/S A/A and A/S A/A and A/S A/A and A/S A/A and A/S
SSL and IPsec VPN Services Yes Yes Yes Yes Yes Yes
VPN Clustering and Load Balancing Yes Yes Yes Yes Yes Yes
Advanced Endpoint Assessment3 Yes Yes Yes Yes Yes Yes

1 Maximum throughput measured under ideal test conditions
2 VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should be taken in to consideration as part of your capacity planning.
3 Licensed features
4 A/S = Active/Standby; A/A = Active/Active
Cisco ASA 5500 Series Model/License Cisco ASA 5505 Base /
Security Plus		 Cisco ASA 5510 Base /
Security Plus		 Cisco ASA 5520 Cisco ASA 5540 Cisco ASA 5550
Product Image
(click to enlarge)
Network Location Small Business, Branch Office, Enterprise Teleworker Internet Edge Internet Edge Internet Edge Internet Edge, Campus
Performance Summary  
Maximum Firewall throughput 150 Mbps 300 Mbps 450 Mbps 650 Mbps 1.2 Gbps
Maximum Firewall Connections 10,000 /
25,000		 50,000 /
130,000		 280,000 400,000 650,000
Maximum Firewall Connections/Second 4000 9000 12,000 25,000 33,000
Packets Per Second (64 byte) 85,000 190,000 320,000 500,000 600,000
Maximum 3DES/AES VPN Throughput 100 Mbps 170 Mbps 225 Mbps 325 Mbps 425 Mbps
Maximum Site-to-Site and IPsec IKEv1 Client VPN User Sessions 10 /25 250 750 5000 5000
Maximum AnyConnect or Clientless VPN User Sessions 25 250 750 2500 5000
Bundled SSL VPN User Session 2 2 2 2 2
Technical Summary  
Memory 512 MB 1 GB 2 GB 2 GB 4 GB
Minimum System Flash 128 MB 256 MB 256 MB 256 MB 256 MB
Integrated Ports 8 port 10/100 switch with 2 Power over Ethernet (PoE) ports

5-10/100  /
2-10/100/1000, 3-10/100

+4-10/100/1000, 4 SFP (with 4GE SSM)

4-10/100/1000,
1-10/100

+4-10/100/1000, 4 SFP (with 4GE SSM)

4-10/100/1000,
1-10/100

+4-10/100/1000, 4 SFP (with 4GE SSM)		 8-10/100/1000,
4-SFP, 1-10/100
Maximum Virtual Interfaces (VLANs) 3 (trunking disabled) /
20 (trunking enabled)		 50 / 100 150 200 400
Expansion Capabilities  
SSC/SSM/ICs Expansion 1-SSC 1-SSM 1-SSM 1-SSM Not available
SSC/SSM/ICs Supported AIP, SSC CSC SSM, AIP SSM, 4GE SSM CSC SSM, AIP SSM, 4GE SSM CSC SSM, AIP SSM, 4GE SSM Not available
Intrusion Prevention Yes (with AIP SSC) Yes (with AIP SSM) Yes (with AIP SSM) Yes (with AIP SSM) Not available
Concurrent Threat Mitigation Throughput (Mbps) (Firewall + IPS Services) 75 (with AIP SSC-5) 150 (with AIP SSM-10)
300 (with AIP SSM-20)		 225 (with AIP SSM-10)
375 (with AIP SSM-20)
450 (with AIP SSM-40)		 500 (wth AIP SSM-20)
650 (with AIP SSM-40)		 Not available
Content Security (Anti-virus, Anti-Spyware, File Blocking) Not available Yes (with CSC SSM) Yes (with CSC SSM) Yes (with CSC SSM) Not available
Maximum Number of Users for Anti-virus, Anti-spyware, File Blocking (CSC SSM only) Not available 500 (CSC-SSM-10)
1000 (CSC-SSM-20)		 500 (CSC-SSM-10)
1000 (CSC-SSM-20)		 500 (CSC-SSM-10)
1000 (CSC-SSM-20)		 Not available
Content Security Plus License features Not available Anti-spam, anti-phishing, URL filtering Anti-spam, anti-phishing, URL filtering Anti-spam, anti-phishing, URL filtering Not available
Features  
Cisco Adaptive Security Appliance Software Version (latest) 8.4 8.4 8.4 8.4 8.4
Application-layer Firewall Services Yes Yes Yes Yes Yes
Layer 2 Transparent Firewalling Yes Yes Yes Yes Yes
Security Contexts (included/maximum)1 0/0 0/0 /
2/5		 2/20 2/50 2/100
GTP/GPRS Inspection1 Not available Not available Yes Yes Yes
High-availability Support2 Not supported
Stateless A/S		 Not supported
A/A and A/S		 A/A and A/S A/A and A/S A/A and A/S
SSL and IPsec VPN Services Yes Yes Yes Yes Yes
VPN Clustering and Load Balancing Not available Not available /
Yes		 Yes Yes Yes
Advanced Endpoint Assessment1 Yes Yes Yes Yes Yes

ACRONYMS
SSC: Security Services Card
SSM: Security Services Module
IC: Interface Card
AIP SSM: Advanced Inspection and Prevention Security Services Module
CSC SSM: Content Security and Control Security Services Module
4GE SSM: 4 Gigabit Ethernet Security Services Module

1 Licensed features
2 A/S = Active/Standby; A/A = Active/Active
3 Two regular zones and one restricted zone that can only communicate with one other zone