Cisco ASA with FirePOWER Services

Transcription

1 Data Sht with Mt th industry s first adaptiv, thrat-focusd nxt-gnration firwall (NGFW) dsignd for a nw ra of thrat and advancd malwar protction. Cisco ASA with dlivrs intgratd thrat dfns for th ntir attack continuum - bfor, during, and aftr an attack. How? By combining th provn scurity capabilitis of th firwall with th industry-lading Sourcfir thrat and Advancd Malwar Protction (AMP) faturs togthr in a singl dvic. Th solution uniquly xtnds th capabilitis of th 5500-X Sris Nxt- Gnration Firwalls byond what today s NGFW solutions ar capabl of. Whthr you nd protction for a small or midsizd businss, a distributd ntrpris, or a singl data cntr, with provids th ndd scal and contxt in a NGFW solution. Suprior Multilayrd Protction with brings distinctiv thrat-focusd nxt-gnration scurity srvics to th 5500-X Sris Nxt-Gnration Firwalls. It provids comprhnsiv protction from known and advancd thrats, including protction against targtd and prsistnt malwar attacks (Figur 1). is th world s most widly dployd, ntrpris-class statful firwall. with faturs ths comprhnsiv capabilitis: Sit-to-sit and rmot accss VPN and advancd clustring provid highly scur, high-prformanc accss and high availability to hlp nsur businss continuity. Granular Application Visibility and Control (AVC) supports mor than 4,000 application-layr and risk-basd controls that can launch tailord intrusion prvntion systm (IPS) thrat dtction policis to optimiz scurity ffctivnss. Th industry-lading with nxt-gnration IPS (NGIPS) provids highly ffctiv thrat prvntion and full contxtual awarnss of usrs, infrastructur, applications, and contnt to dtct multivctor thrats and automat dfns rspons. Rputation- and catgory-basd URL filtring offr comprhnsiv alrting and control ovr suspicious wb traffic and nforc policis on hundrds of millions of URLs in mor than 80 catgoris. AMP provids industry-lading brach dtction ffctivnss, sandboxing, a low total cost of ownrship, and suprior protction valu that hlps you discovr, undrstand, and stop malwar and mrging thrats missd by othr scurity layrs Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 1 of 16

2 Figur 1. with : Ky Scurity Faturs Unprcdntd Ntwork Visibility with is cntrally managd by th Cisco Firpowr Managmnt Cntr (formrly known as Cisco FirSIGHT Managmnt Cntr), which provids scurity tams with comprhnsiv visibility into and control ovr activity within th ntwork. Such visibility includs usrs, dvics, communication btwn virtual machins, vulnrabilitis, thrats, clint-sid applications, fils, and wb sits. Holistic, actionabl indications of compromis (IoCs) corrlat dtaild ntwork and ndpoint vnt information and provid furthr visibility into malwar infctions. Cisco s ntrpris-class managmnt tools hlp administrators rduc complxity with unmatchd visibility and control across NGFW dploymnts. Cisco Firpowr Managmnt Cntr also provids contnt awarnss with malwar fil trajctory that aids infction scoping and root caus dtrmination to spd tim to rmdiation. Cisco Scurity Managr provids scalabl and cntralizd ntwork oprations workflow managmnt. It intgrats a powrful suit of capabilitis; including policy and objct managmnt, vnt managmnt, rporting, and troublshooting for firwall functions whn utilizing Cisco Firpowr Managmnt Cntr. For local, on-dvic managmnt including dploymnts for small and midsizd businsss, Cisco Adaptiv Scurity Dvic Managr (ASDM) 7.3.x provids, accss control and advancd thrat dfns managmnt. ASDM V 7.3.x provids an nhancd usr intrfac that provids quick viws on trnds and th ability to drill down for furthr analysis Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 2 of 16

3 Figur 2. Cisco Firpowr Managmnt Cntr: Intuitiv High-Lvl and Dtaild Drill-Down Dashboards Rducd Costs and Complxity with incorporats an intgratd approach to thrat dfns, rducing capital and oprating costs and administrativ complxity. It smoothly intgrats with th xisting IT nvironmnt, work stram, and ntwork fabric. Th applianc family is highly scalabl, prforms at up to multigigabit spds, and provids consistnt and robust scurity across branch, Intrnt dg, and data cntrs in both physical and virtual nvironmnts. With Cisco Firpowr Managmnt Cntr, administrators can stramlin oprations to corrlat thrats, assss thir impact, automatically tun scurity policy, and asily attribut usr idntitis to scurity vnts. Cisco Firpowr Managmnt Cntr continually monitors how th ntwork is changing ovr tim. Nw thrats ar automatically assssd to dtrmin which ons can affct your businss. Rsponss ar thn focusd on rmdiation and ntwork dfnss ar adaptd to changing thrat conditions. Critical scurity activitis such as policy tuning ar automatd, saving tim and ffort, whil protctions and countrmasurs ar maintaind in an optimal stat. Cisco Firpowr Managmnt Cntr intgrats asily with third-party scurity solutions through th Stramr API to stramlin opration workflows and fit xisting ntwork fabrics Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 3 of 16

4 Tabl 1 highlights th bst-in-class faturs and bnfits of with. Tabl 1. Faturs and Bnfits of with Fatur Nxt-gnration firwall Provn ASA firwall Markt-lading NGIPS Advancd malwar protction Full contxtual awarnss Application control and URL filtring Entrpris-class managmnt Stramlind oprations automation Purpos-built, scalabl On-dvic managmnt Rmot Accss VPN Sit-to-sit VPN Intgratd wirlss accss Ruggdizd form factor Third-party tchnology cosystm Intgration with Snort and OpnAppID Collctiv Scurity intllignc (CSI) Bnfits Industry s first thrat-focusd NGFW; provids ASA firwall functionality, advancd thrat protction, and advancd brach dtction and rmdiation combind in a singl dvic Rich routing, statful firwall, Ntwork Addrss Translation, and dynamic clustring for high-prformanc, highly scur, and rliabl accss with Cisco AnyConnct VPN Suprior thrat prvntion and mitigation for both known and unknown thrats Dtction, blocking, tracking, analysis, and rmdiation to protct th ntrpris against targtd and prsistnt malwar attacks Policy nforcmnt basd on complt visibility of usrs, mobil dvics, clint-sid applications, communication btwn virtual machins, vulnrabilitis, thrats, and URLs Application-layr control (ovr applications, golocations, usrs, wbsits) and ability to nforc usag and tailor dtction policis basd on custom applications and URLs Dashboards and drill-down rports of discovrd hosts, applications, thrats, and indications of compromis for comprhnsiv visibility Lowr oprating cost and administrativ complxity with thrat corrlation, impact assssmnt, automatd scurity policy tuning, and usr idntification Highly scalabl scurity applianc architctur that prforms at up to multigigabit spds; consistnt and robust scurity across small offic, branch offics, Intrnt dg, and data cntrs in ithr physical and virtual nvironmnts Simplifis advancd thrat dfns managmnt for small and mdium sizd businss with small scal dploymnts Extnds scur corporat ntwork accss byond corporat laptops to prsonal mobil dvics, rgardlss of physical location; support for Cisco AnyConnct Scur Mobility Solution, with granular, application-lvl VPN capability, as wll as nativ Appl ios and Android VPN clints Protct traffic, including VoIP and clint-srvr application data, across th distributd ntrpris and branch offics Intgratd Wi-Fi is availabl in th dsktop form factor (ASA 5506W-X) for compact and simplifid small offic dploymnts A ruggdizd modl (ASA 5506H-X), dsignd spcifically for xtrm nvironmntal conditions, is availabl for critical infrastructur and control ntwork applications Opn API that nabls th third-party tchnology cosystm to intgrat with xisting customr work strams Opn sourc scurity intgration with Snort and OpnAppID for accss to community rsourcs and ability to asily customiz scurity to addrss nw and spcific thrats and applications quickly Unmatchd scurity and wb rputation intllignc provids ral-tim thrat intllignc and scurity protction 2018 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 4 of 16

5 Product Prformanc and Spcifications Tabl 2 dtails th NGFW capabilitis and capacitis of th with for 5500-X Sris. Tabl X with Capabilitis and Capacitis Fatur Throughput: Application Control (AVC) Throughput: Application Control (AVC) and IPS Maximum concurrnt sssions Maximum Nw Connctions pr scond Supportd applications URL catgoris 80+ Numbr of URLs catgorizd Cntralizd configuration, logging, monitoring, and rporting On-Dvic Managmnt 5506-X w/ R Cisco ASA 5506W-X w/ R Cisco ASA 5506H-X w/ FirPOW ER Cisco ASA 5508-X w/ FirPOW ER Cisco ASA 5516-X w/ FirPOW ER 5512-X w/ R Cisco ASA 5515-X w/ FirPOW ER 250 Mbps 250 Mbps 250 Mbps 450 Mbps 850 Mbps 300 Mbps 500 Mbps 125 Mbps 125 Mbps 125 Mbps 250 Mbps 450 Mbps 150 Mbps 250 Mbps 5525-X w/ R Cisco ASA 5545-X w/ R 1,100 Mbps 1,500 Mbps 650 Mbps 1,000 Mbps Cisco ASA 5555-X w/ FirPOW ER 1,750 Mbps 1,250 Mbps 20,000; 20,000; , , , , , ,000 1,000, ,000 5,000 5,000 10,000 20,000 10,000 15,000 20,000 30,000 50,000 Mor than 3,000 Mor than 280 million Multi-dvic Cisco Scurity Managr (CSM) and Cisco Firpowr Managmnt Cntr ASDM (vrsion 7.3 or highr rquird) 1 Highr spcifications ar associatd with th Scurity Plus licns. ASDM 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 5 of 16

6 Tabl 3 compars th faturs and capacitis of th diffrnt ASA 5500-X Sris Nxt-Gnration Firwalls for small offics, branch locations, and Intrnt dg dploymnts. Tabl X Sris Nxt-Gnration Firwalls Fatur 5506-X w/ 5506W-X w/ 5506H-X w/ 5508-X w/ 5516-X w/ 5512-X w/ 5515-X w/ 5525-X w/ 5545-X w/ 5555-X w/ Statful inspction throughput (maximum 1 ) Statful inspction throughput (multiprotocol 2 ) Tripl Data Encryption Standard/Adv ancd Encryption Standard (3DES/AES) VPN throughput Mbps 750 Mbps 750 Mbps 1 Gbps 1.8 Gbps 1 Gbps 1.2 Gbps 2 Gbps 3 Gbps 4 Gbps 300 Mbps 300 Mbps 300 Mbps 500 Mbps 900 Mbps 500 Mbps 600 Mbps 1 Gbps 1.5 Gbps 2 Gbps 100 Mbps 100 Mbps 100 Mbps 175 Mbps 250 Mbps 200 Mbps 250 Mbps 300 Mbps 400 Mbps 700 Mbps Usrs/nods Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd Unlimitd IPsc sit-tosit VPN prs Cisco Cloud Wb Scurity usrs Cisco AnyConnct Plus/Apx VPN maximum simultanous connctions 5 Virtual intrfacs (VLANs) Scurity contxts 5 (includd; maximum) 10; ; For dtaild sizing guidanc s th CWS Connctor Sizing for ASA 5500 and ASA 5500-X ; ; ; N/A N/A N/A 2; 5 2; 5 0,0; 2,5 2;5 2; 20 2; 50 2; 100 High availability 4 Intgratd Wirlss Accss Point (S Cisco AP 702 datasht for WiFi tchnical dtails) Rquirs Scurity Plus Licns; N/A Rquirs Scurity Plus Licns; ndb y Wirlss Bands a/b/g/n; Max n wifi throughput 54 Mbps; intrnal antnna only; local managmnt or cntralizd via Cisco WLC Activ/Acti v and Activ/Acti v and Rquirs Scurity Plus Licns; Activ/Acti v and Activ/Acti v and Activ/Acti v and Activ/Acti v and N/A N/A N/A N/A N/A N/A N/A N/A Activ/Acti v and 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 6 of 16

7 Fatur 5506-X w/ 5506W-X w/ 5506H-X w/ 5508-X w/ 5516-X w/ 5512-X w/ 5515-X w/ 5525-X w/ 5545-X w/ 5555-X w/ Expansion slot Usraccssibl Flash slot USB 2.0 ports N/A N/A N/A N/A N/A 1 intrfac card 1 intrfac card 1 intrfac card 1 intrfac card No No No No No No No 0-0 USB port typ A, High Spd 2.0 Intgratd I/O 8 x 1 Gigabit Ethrnt (GE) USB port typ A, High Spd 2.0 USB port typ A, High Spd 2.0 USB port typ A, High Spd 2.0 USB port typ A, High Spd x 1GE 4 x 1GE 8 x 1GE 8 x 1GE 6 GE coppr Expansion I/O N/A N/A N/A N/A N/A 6 GE coppr or GE coppr 6 GE coppr or 8 GE coppr 6 GE coppr or 8 GE coppr 6 GE coppr or 1 intrfac card 8 GE coppr 6 GE coppr or 6 GE Small Form- Factor Pluggabl (SFP) 6 GE SFP 6 GE SFP 6 GE SFP 6 GE SFP Ddicatd managmnt port Srial ports Solid-stat driv Ys (To b shard with R ), 10/100/10 00 and Mini USB 50 GB msata 6 Ys (To b shard with ), 10/100/1000 and Mini USB 50 GB msata 6 Ys (To b shard with R ), 10/100/10 00 and Mini USB 50 GB msata tstd for hat Ys (To b shard with R ), 10/100/10 00 and Mini USB 80 GB msata 6 Ys (To b shard with R ), 10/100/10 00 and Mini USB Ys (1 GE) 100 GB 1 slot, 120 msata 6 GB multilin configurat or slfncrypting driv (MLC SED) Ys (1 GE) 1 slot, 120 GB MLC SED Ys (1 GE) Ys (1 GE) 1 slot, 2 slots, RAID GB MLC SED 120 GB MLC SED Mmory 4 GB 4 GB 4 GB 8 GB 8 GB 4 GB 8 GB 8 GB 12 GB 16 GB Systm flash 8 GB 8 GB 8 GB 8 GB 8 GB 4 GB 8 GB 8 GB 8 GB 8 GB Systm bus architctur Oprating Paramtrs Tmpratur Rlativ humidity Altitud 32 to 104 F (0 to 40 C) 90 10,000 ft (3048 m) architctur 32 to 104 F (0 to 40 C) 90 nsi ng and tstd 10,000 ft (3048 m) architctur -4 to 140 F (-20 to 60 C) 95 10,000 ft (3050 m) architctur 32 to 104 F (0 to 40 C) 10,000 ft (3048 m) architctur 32 to 104 F (0 to 40 C) 10,000 ft (3048 m) architctur 23 to 104 F (-5 to 40 C) architctur 23 to 104 F (-5 to 40 C) architctur 23 to 104 F (-5 to 40 C) architctur 23 to 104 F (-5 to 40 C) Ys (1 GE) 2 slots, RAID GB MLC SED architctur 23 to 104 F (-5 to 40 C) ,000 ft (3050 m) 10,000 ft (3050 m) 10,000 ft (3050 m) 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 7 of 16

8 Fatur 5506-X w/ 5506W-X w/ 5506H-X w/ 5508-X w/ 5516-X w/ 5512-X w/ 5515-X w/ 5525-X w/ 5545-X w/ 5555-X w/ Acousticnois Fanlss 0 dba Fanlss 0 dba Fanlss 0 dba 41.6 A- wightd dcibls (dba) typ 41.6 dba typ 64.2 dba max 64.2 dba max 64.2 dba max 67.9 dba max 67.9 dba max Non-oprating Paramtrs Tmpratur 7 Rlativ humidity Altitud -13 to 158ºF (-25 to 70ºC) Powr Input (pr powr supply) AC rang lin voltag AC normal lin voltag Extrnal, 90 to 240 volts altrnating currnt () 90 to to 158ºF (-25 to 70ºC) nsi ng and tstd Extrnal, 90 to 240 volts altrnating currnt () 90 to to 185ºF (-40 to 85ºC) 10 to 95 Extrnal, 90 to 240 volts altrnating currnt () 90 to dba max -13 to 158ºF (-25 to 70ºC) Extrnal, 90 to 240 volts altrnating currnt () 91 to 240 AC currnt N/A N/A N/A 0.25AC amps 67.2 dba max -13 to 158ºF (-25 to 70ºC) Extrnal, 90 to 240 volts altrnating currnt () 92 to AC amps -13 to 158ºF (-25 to 70ºC) (4570 m) -13 to 158ºF (-25 to 70ºC) (4570 m) -13 to 158 F (-25 to 70 C) -13 to 158 F (-25 to 70 C) 4.85A 4.85A 4.85A 5A, 100 to 120V 2.5A, 200 to 240V -13 to 158 F (-25 to 70 C) 5A, 100 to 120V 2.5A, 200 to 240V AC frquncy 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz Dual-powr supplis DC domstic lin voltag DC intrnational lin voltag Non Non Non Non Non Non Non Non Ys Ys N/A N/A N/A N/A N/A to 56 volts dirct currnt () (-48 N/A N/A N/A N/A N/A -55 to -72 (-60 DC currnt N/A N/A N/A N/A N/A 15A (maximum input) Output Stady stat Maximum pak Maximum hat dissipation 3.0A 5A 5A 5.0A 205 British thrmal units (Btu)/hr 3.0A 5.0A to 56 ( to -72 (-60 15A (maximum input) to 56 ( to -72 (-60 15A (maximum input) to 56 ( to -72 (-60 15A (maximum input) to 56 ( to -72 (-60 51W 65W 75W 86W 90W 15A (maximum input) 56W 70W 108W 125W 134W 205 Btu/hr 75 Btu/hr 205 Btu/hr 205 Btu/hr 192 Btu/hr 239 Btu/hr 369 Btu/hr 427 Btu/hr 458 Btu/hr 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 8 of 16

9 Fatur 5506-X w/ 5506W-X w/ 5506H-X w/ 5508-X w/ 5516-X w/ 5512-X w/ 5515-X w/ 5525-X w/ 5545-X w/ 5555-X w/ Form factor Dimnsions Dsktop, rack mountabl 1.72 x x 9.23 in. (H x W x D) (4.369 x x cm) Wight (with AC powr supply) 4 lb (1.82 kg) Dsktop, rack mountabl 1.72 x x 9.23 in. (4.369 x x cm) Dsktop, rack mountabl, wall mountabl, DIN-Rail 2.72 x 9.05 x 9.05 in. (6.9 x 23.0 x 23.0 cm) 4 lb (1.82 kg) 7 lb (3.18 kg) 1 rack unit (RU), 19- in. rackmountabl 1.72 x 17.2 x in. (4.369 x x cm) 1 rack unit (RU), 19- in. rackmountabl 1.72 x 17.2 x in. (4.369 x x cm) 1 rack unit (RU), 19- in. rackmountabl 1.67 x 16.7 x 15.6 in. (4.24 x 42.9 x 39.5 cm) 8 lb (3 kg) 8 lb (3 kg) lb (6.07 kg) 1RU, 19- in. rackmountabl 1.67 x 16.7 x 15.6 in. (4.24 x 42.9 x 39.5 cm) lb (6.07 kg) 1RU, 19- in. rackmountabl 1.75 x 17.5 x in. (4.45 x x cm) 22.0 lb (10 kg) 1RU, 19- in. rackmountabl 1.67 x 16.7 x 19.1 in. (4.24 x 42.9 x 48.4 cm) lb (7.63 kg) with singl powr supply 1RU, 19- in. rackmountabl 1.67 x 16.7 x 19.1 in. (4.24 x 42.9 x 48.4 cm) lb (7.63 kg) with singl powr supply lb (8.61 kg) with dual powr supply lb (8.61 kg) with dual powr supply 1 Maximum throughput masurd with UDP traffic undr idal conditions. 2 Multiprotocol = Traffic profil consisting primarily of TCP-basd protocols/applications lik HTTP, SMTP, FTP, IMAPv4, BitTorrnt, and DNS. 3 VPN throughput and sssions count dpnd on th ASA dvic configuration and VPN traffic pattrns. Ths lmnts should b takn into considration as part of your capacity planning. 4 Highr spcifications ar associatd with th Scurity Plus licns. 5 Sparatly licnsd fatur. For AnyConnct, licnss ar purchasd basd on fatur tir (Plus/Apx), trm and authorizd usr licns. S ordring guid blow for dtaild ordring instructions. 6 Usabl spac dpndnt upon systm softwar. 7 Drat th maximum oprating tmpratur 1.5 C pr 1000 ft abov sa lvl. Hardwar Product Complianc Currnt information on ASA with product complianc information can b found on th Cisco Product Approval Status (PAS) link: If you ar not rgistrd with Cisco.com, plas rfr to th rgistration link locatd at: To accss information plas follow th blow stps: 1. Slct th Product Crtifications by Country radio button slct GO 2. Undr option 2 ntr product ID or part of it in th product nam box (on at a tim only) for xampl FPR- C Undr additional filtr slct or highlight your country of intrst or kp all countris slctd for full rsults 4. Slct submit 5. Your rsults will b displayd. Undr status slct th hyprlink Dtails 6. Find your corrsponding documnts 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 9 of 16

10 Hardwar Product Prformanc and Spcifications Platform Support/Compatibility with includ firwalling, AVC, URL filtring, NGIPS, and AMP. This uniqu st of capabilitis is availabl on th 5500-X Sris NGFW platforms: 5506-X, 5506W- X, 5506H-X, 5508-X, 5516-X, 5512-X, 5515-X, 5525-X, 5545-X, 5555-X. with softwar is supportd on th 5500-X Sris of nxt-gnration midrang scurity appliancs running Softwar Rlas and latr. Cisco Firpowr Managmnt Cntr and Cisco Scurity Managr ar rquird to manag with ASA 5512-X, 5515-X, 5525-X, 5545-X, 5555-X. ASDM V 7.3.x is availabl on-dvic to manag singl instanc dploymnts of 5506-X, 5506W-X, 5506H-X, 5508-X, and 5516-X with X Sris 6-Port GE Intrfac Cards 5500-X Sris 6-port Gigabit Ethrnt Intrfac Cards xtnd th I/O profil of th 5500-X Sris appliancs * by providing additional GE ports. Th cards provid th following bnfits: Bttr sgmntation of ntwork traffic into sparat scurity zons Fibr-optic cabl connctivity for long-distanc communication Load sharing of traffic as wll as protction against link failur through th us of EthrChannl Support for jumbo Ethrnt frams of up to 9000 byts Protction against cabl failur for th most dmanding activ/activ failovr and full-msh firwall dploymnts Not: * Not availabl on ASA 5508-X or ASA 5516-X Tabl 4 lists th charactristics of th 5500-X Sris 6-port GE intrfac cards. Tabl 4. Charactristics of 5500-X Sris 6-Port GE Intrfac Cards Fatur 5500-X Sris 6-Port 10/100/ X Sris 6-Port GE SFP SX, LH, and LX Tchnical Spcifications Intgratd ports Six 10/100/1000BASE-T Six GE optical SFP 1000BASE-SX, 1000BASE-LX, or 1000BASE-LH transcivr supportd Environmntal Oprating Rangs Oprating Tmpratur 32 to 113ºF (0 to 45ºC) 32 to 113ºF (0 to 45ºC) Rlativ humidity 5 to 95 5 to 95 Nonoprating Tmpratur -40 to 149ºF (-40 to 65ºC) -40 to 149ºF (-40 to 65ºC) Powr consumption 25W maximum 25W maximum Physical Spcifications Dimnsions (H x W x D) 1.57 x 5.31 x 9.09 in. (3.99 x x cm) 1.57 x 5.31 x 9.09 in. (3.99 x x cm) 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 10 of 16

11 Fatur 5500-X Sris 6-Port 10/100/ X Sris 6-Port GE SFP SX, LH, and LX Wight 1.00 lb (0.45 kg) 1.00 lb (0.45 kg) Rgulatory and Standards Complianc Safty UL 60950, CSA C22.2 No , EN IEC 60950, AS/NZS60950 Elctromagntic compatibility (EMC) CE marking, FCC Part 15 Class A, AS/NZS CISPR22 Class A, VCCI Class A, EN55022 Class A, CISPR22 Class A, EN , EN UL 60950, CSA C22.2 No , EN IEC 60950, AS/NZS60950 CE marking, FCC Part 15 Class A, AS/NZS CISPR22 Class A, VCCI Class A, EN55022 Class A, CISPR22 Class A, EN , EN Ordring Information To plac an ordr, visit th Cisco ordring hompag. Tabl 5 provids ordring information for with. Tabl 5. with Fir POWER Ordring Information Th following tabl includs bundl SKUs (including hardwar and subscription) that offr a convnint mchanism for ordring both th appliancs and softwar subscriptions in a singl SKU configuration. It is th rcommndd mod of configuration for ordring. Standalon AMP licns and subscriptions ar also availabl to upgrad an xisting TA or TAC subscription licns. Plas s th ASA with Ordring Guid for dtails Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 11 of 16

12 with 5500-X Sris Bundls (Hardwar and Subscription) ASA 5506-X with Svcs. Chassis and Subs. Bundl ASA 5506W-X with Svcs. WiFi Chassis and Subs. Bundl ASA 5508-X with Svcs. Chassis and Subs. Bundl ASA 5516-X with Svcs. Chassis and Subs. Bundl ASA 5512-X with Svcs. Chassis and Subs. Bundl ASA 5515-X with Svcs. Chassis and Subs. Bundl ASA 5525-X with Svcs. Chassis and Subs. Bundl ASA 5545-X with Svcs. Chassis and Subs. Bundl ASA 5555-X with Svcs. Chassis and Subs. Bundl ASA5506-FPWR-BUN ASA5506W-FPWR-BUN ASA5508-FPWR-BUN ASA5516-FPWR-BUN ASA5512-FPWR-BUN ASA5515-FPWR-BUN ASA5525-FPWR-BUN ASA5545-FPWR-BUN ASA5555-FPWR-BUN 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 12 of 16

13 Product Dscription 5506-X Sris Low-End Appliancs (Hardwar) ASA 5506-X with srvics, 8GE Data, 1GE Mgmt, AC, DES ASA 5506-X with srvics, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506W-A-X with srvics, WiFi for North Amrica (NOT US), 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506W-B-X with srvics, WiFi for US ONLY, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506W-E-X with srvics, WiFi for Europ, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506W-Q-X with srvics, WiFi for Japan, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506W-Z-X with srvics, WiFi for Australia/Nw Zaland, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506H-X with srvics, ruggdizd, scurity plus, 4GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5506H-X with srvics, ruggdizd, scurity plus, 4GE Data, 1GE Mgmt, AC, DES ASA 5508-X with srvics, 8GE Data, 1GE Mgmt, AC, DES ASA 5508-X with srvics, 8GE Data, 1GE Mgmt, AC, 3DES/AES ASA 5516-X with srvics, 8GE Data, 1GE Mgmt, AC, DES ASA 5516-X with srvics, 8GE Data, 1GE Mgmt, AC, 3DES/AES 5500-X Sris Midrang Appliancs (Hardwar) ASA 5512-X with, 6GE data, AC, 3DES/AES, SSD ASA 5515-X with, 6GE data, AC, 3DES/AES, SSD ASA 5525-X with, 8GE data, AC, 3DES/AES, SSD ASA 5545-X with, 8GE data, AC, 3DES/AES, 2 SSD ASA 5555-X with, 8GE data, AC, 3DES/AES, 2 SSD 5500-X Sris Intrfac Cards Intrfac Card with 6 coppr GE data ports for ASA 5512-X and ASA 5515-X Intrfac Card with 6 coppr GE data ports for ASA 5525-X Intrfac Card with 6 coppr GE data ports for ASA 5545-X and ASA 5555-X Intrfac Card with 6 SFP GE data ports (SX, LH, and LX) for ASA 5512-X and ASA 5515-X Intrfac Card with 6 SFP GE data ports (SX, LH, and LX) for ASA 5525-X Intrfac Card with 6 SFP GE data ports (SX, LH, and LX) for ASA 5545-X and ASA 5555-X Intrfac Card with 6 coppr GE data ports for ASA 5512-X and ASA 5515-X (spar) Intrfac Card with 6 coppr GE data ports for ASA 5525-X (spar) Intrfac Card with 6 coppr GE data ports for ASA 5545-X and ASA 5555-X (spar) Intrfac Card with 6 SFP GE data ports (SX, LH, and LX) for ASA 5512-X and ASA 5515-X (spar) 5500-X Sris Accssoris Part Numbr ASA5506-K8 ASA5506-K9 ASA5506W-A-K9 ASA5506W-B-K9 ASA5506W-E-K9 ASA5506W-Q-K9 ASA5506W-Z-K9 ASA5506H-SP-BUN-K9 ASA5506H-SP-BUN-K8 ASA5508-K8 ASA5508-K9 ASA5516-FPWR-K8 ASA5516-FPWR-K9 ASA5512-FPWR-K9 ASA5515-FPWR-K9 ASA5525-FPWR-K9 ASA5545-FPWR-K9 ASA5555-FPWR-K9 ASA-IC-6GE-CU-A ASA-IC-6GE-CU-B ASA-IC-6GE-CU-C ASA-IC-6GE-SFP-A ASA-IC-6GE-SFP-B ASA-IC-6GE-SFP-C ASA-IC-6GE-CU-A= ASA-IC-6GE-CU-B= ASA-IC-6GE-CU-C= ASA-IC-6GE-SFP-A= 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 13 of 16

14 Product Dscription Cisco GE optical SFP connctor, 1000BASE-SX short-wavlngth transcivr (spar) Cisco GE optical SFP connctor, 1000BASE-LX/LH longwavlngth/long-haul transcivr (spar) Cisco GE optical SFP connctor, 1000BASE-SX short-wavlngth transcivr, digital optical monitoring (DOM) (spar) Cisco GE optical SFP connctor, 1000BASE-LX/LH longwavlngth/long-haul transcivr, DOM (spar) 5512-X and 5515-X intrfac card (blank) (spar) 5525-X intrfac card slot (blank) (spar) 5545-Xand 5555-X intrfac card slot (blank) (spar) Part Numbr GLC-SX-MM= GLC-LH-SM= GLC-SX-MMD= GLC-LH-SMD= ASA-IC-A-BLANK= ASA-IC-B-BLANK= ASA-IC-C-BLANK= ASA with Softwar Subscriptions: 3-Yar Trm (1-Yar Srvic Softwar Bundl Subscriptions Can b Purchasd as wll as Individual Cisco IPS, AMP, and URL Filtring Srvic Softwar Subscriptions with 1-Yar and 3-Yar Trms) 5506 IPS and Apps 3YR Subscription L-ASA5506-TA= L-ASA5506-TA-3Y 5506 IPS, Apps and URL 3YR Subscription L-ASA5506-TAC= L-ASA5506-TAC-3Y 5506 IPS, Apps and AMP 3YR Subscription L-ASA5506-TAM= L-ASA5506-TAM-3Y 5506 IPS, Apps, AMP and URL 3YR Subscription L-ASA5506-TAMC= L-ASA5506-TAMC-3Y 5506 URL Filtring 3YR Subscription L-ASA5506-URL= L-ASA5506-URL-3Y 5506W IPS and Apps 3YR Subscription L-ASA5506W-TA= L-ASA5506-TA-3Y 5506W IPS, Apps and URL 3YR Subscription L-ASA5506W-TAC= L-ASA5506-TAC-3Y 5506W IPS, Apps and AMP 3YR Subscription L-ASA5506W-TAM= L-ASA5506-TAM-3Y 5506W IPS, Apps, AMP and URL 3YR Subscription L-ASA5506W-TAMC= L-ASA5506-TAMC-3Y 5506W URL Filtring 3YR Subscription L-ASA5506W-URL= L-ASA5506-URL-3Y 5506H IPS and Apps 3YR Subscription L-ASA5506H-TA= L-ASA5506H-TA-3Y 5506H IPS, Apps and URL 3YR Subscription L-ASA5506H-TAC= L-ASA5506H-TAC-3Y 5506H IPS, Apps and AMP 3YR Subscription L-ASA5506H-TAM= L-ASA5506H-TAM-3Y 5506H IPS, Apps, AMP and URL 3YR Subscription L-ASA5506H-TAMC= L-ASA5506H-TAMC-3Y 5508 IPS and Apps 3YR Subscription L-ASA5508-TA= L-ASA5508-TA-3Y 5508 IPS, Apps and URL 3YR Subscription L-ASA5508-TAC= L-ASA5508-TAC-3Y 5508 IPS, Apps and AMP 3YR Subscription L-ASA5508-TAM= L-ASA5508-TAM-3Y 5508 IPS, Apps, AMP and URL 3YR Subscription L-ASA5508-TAMC= L-ASA5508-TAMC-3Y 5508 URL Filtring 3YR Subscription L-ASA5508-URL= L-ASA5508-URL-3Y 5516 IPS and Apps 3YR Subscription L-ASA5516-TA= L-ASA5516-TA-3Y 5516 IPS, Apps and URL 3YR Subscription L-ASA5516-TAC= L-ASA5516-TAC-3Y 5516 IPS, Apps and AMP 3YR Subscription L-ASA5516-TAM= L-ASA5516-TAM-3Y 5516 IPS, Apps, AMP and URL 3YR Subscription L-ASA5516-TAMC= L-ASA5516-TAMC-3Y 5516 URL Filtring 3YR Subscription L-ASA5516-URL= L-ASA5516-URL-3Y 5512 IPS and Apps 3YR Subscription L-ASA5512-TA= L-ASA5512-TA-3Y 5512 IPS, Apps and URL 3YR Subscription L-ASA5512-TAC= L-ASA5512-TAC-3Y 5512 IPS, Apps and AMP 3YR Subscription L-ASA5512-TAM= L-ASA5512-TAM-3Y 5512 IPS, Apps, AMP and URL 3YR Subscription L-ASA5512-TAMC= L-ASA5512-TAMC-3Y 5512 URL Filtring 3YR Subscription L-ASA5512-URL= L-ASA5512-URL-3Y 5515 IPS and Apps 3YR Subscription L-ASA5515-TA= L-ASA5515-TA-3Y 5515 IPS, Apps and URL 3YR Subscription L-ASA5515-TAC= L-ASA5515-TAC-3Y 5515 IPS, Apps and AMP 3YR Subscription L-ASA5515-TAM= L-ASA5515-TAM-3Y 2017 Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 14 of 16

15 Product Dscription Part Numbr 5515 IPS, Apps, AMP and URL 3YR Subscription L-ASA5515-TAMC= L-ASA5515-TAMC-3Y 5515 URL Filtring 3YR Subscription L-ASA5515-URL= L-ASA5515-URL-3Y 5525 IPS and Apps 3YR Subscription L-ASA5525-TA= L-ASA5525-TA-3Y 5525 IPS, Apps and URL 3YR Subscription L-ASA5525-TAC= L-ASA5525-TAC-3Y 5525 IPS, Apps and AMP 3YR Subscription L-ASA5525-TAM= L-ASA5525-TAM-3Y 5525 IPS, Apps, AMP and URL 3YR Subscription L-ASA5525-TAMC= L-ASA5525-TAMC-3Y 5525 URL Filtring 3YR Subscription L-ASA5525-URL= L-ASA5525-URL-3Y 5545 IPS and Apps 3YR Subscription L-ASA5545-TA= L-ASA5545-TA-3Y 5545 IPS, Apps and URL 3YR Subscription L-ASA5545-TAC= L-ASA5545-TAC-3Y 5545 IPS, Apps and AMP 3YR Subscription L-ASA5545-TAM= L-ASA5545-TAM-3Y 5545 IPS, Apps, AMP and URL 3YR Subscription L-ASA5545-TAMC= L-ASA5545-TAMC-3Y 5545 URL Filtring 3YR Subscription L-ASA5545-URL= L-ASA5545-URL-3Y 5555 IPS and Apps 3YR Subscription L-ASA5555-TA= L-ASA5555-TA-3Y 5555 IPS, Apps and URL 3YR Subscription L-ASA5555-TAC= L-ASA5555-TAC-3Y 5555 IPS, Apps and AMP 3YR Subscription L-ASA5555-TAM= L-ASA5555-TAM-3Y 5555 IPS, Apps, AMP and URL 3YR Subscription L-ASA5555-TAMC= L-ASA5555-TAMC-3Y 5555 URL Filtring 3YR Subscription L-ASA5555-URL= L-ASA5555-URL-3Y To Download th Softwar Visit th Cisco Softwar Cntr to download with Softwar. Cisco Capital Financing Hlps You Achiv Your Objctivs Cisco Capital financing can hlp you acquir th tchnology you nd to achiv your objctivs and stay comptitiv. W can hlp you rduc capital xpnditurs (CapEx), acclrat your growth, and optimiz your invstmnt dollars and ROI. Cisco Capital financing givs you flxibility in acquiring hardwar, softwar, srvics, and complmntary third-party quipmnt. And thr s just on prdictabl paymnt. Cisco Capital financing is availabl in mor than 100 countris. Larn mor. For Mor Information For mor information, plas visit th following links: 5500-X Sris Nxt-Gnration Firwalls: Cisco Scurity Managr: Cisco Adaptiv Scurity Dvic Managr: Cisco Scurity : Cisco AnyConnct Scur Mobility Clint Cisco AnyConnct Ordring Guid Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 15 of 16

16 Printd in USA C / Cisco and/or its affiliats. All rights rsrvd. This documnt is Cisco Public Information. Pag 16 of 16