Cisco ASA 5500 with FirePOWER Services Datasheet

Size: px

Start display at page:

Download "Cisco ASA 5500 with FirePOWER Services Datasheet"

Brenda Knight
5 years ago
Views:

1 5500 with Datasheet

2 CONTENT Overview... 2 Appearance... 2 Key Features... 3 Product Performances and Specifications of CISCO 5500-X... 5 CISCO 5500-X Series Basic Orderin Information Sources Contact Us Tel: (USA) / / Fax: (Hon Kon) cisco@router-switch.com (Sales Inquiries); ccie-support@router-switch.com (CCIE Technical Support); ccie-support@router-switch.com (CCIE Technical Support) ROUTER-SWITCH.COM 1

OVERVIEW with delivers interated threat defense for the entire attack continuum - before, durin, and after an attack, by combinin the proven security capabilities of the firewall with the

3 OVERVIEW with delivers interated threat defense for the entire attack continuum - before, durin, and after an attack, by combinin the proven security capabilities of the firewall with the industry-leadin Sourcefire threat and Advanced Malware Protection (AMP) features toether in a sinle device. The solution extends the capabilities of the 5500-X Series Next-Generation Firewalls beyond what today s NGFW solutions are capable of. with provides the needed scale and context in a NGFW solution, includin protection for a small or midsized business, a distributed enterprise, or a sinle data center APPEARANCE Fiure X NGFW ROUTER-SWITCH.COM 2

4 Key Features Table 1. with Features Feature Benefits Next-eneration firewall Industry s first threat-focused NGFW; provides firewall functionality, advanced threat protection, and advanced breach detection and remediation combined in a sinle device Proven firewall Rich routin, stateful firewall, network address translation, and dynamic clusterin for hih-performance, hihly secure, and reliable access with cisco AnyConnect VPN Market-leadin NGIPS Superior threat prevention and mitiation for both known and unknown threats Advanced protection malware Detection, blockin, trackin, analysis, and remediation to protect the enterprise aainst tareted and persistent malware attacks Full contextual awareness Policy enforcement based on complete visibility of users, mobile devices, client-side applications, communication between virtual machines, vulnerabilities, threats, and URLs Application control and URL filterin Application-layer control (over applications, eolocations, users, websites) and ability to enforce usae and tailor detection policies based on custom applications and URLs Enterprise-class manaement Dashboards and drill-down reports of discovered hosts, applications, threats, and indications of compromise for comprehensive visibility ROUTER-SWITCH.COM 3

5 Streamlined automation operations Lower operatin cost and administrative complexity with threat correlation, impact assessment, automated security policy tunin, and user identification Purpose-built, scalable Hihly scalable security appliance that performs at up to multiiabit speeds; consistent and robust security across small office, branch offices, internet ede, and data centers in either physical and virtual environments On-device manaement Simplifies advanced threat defense manaement for small and medium sized business with small scale deployments Remote access VPN Extends secure corporate network access beyond corporate laptops to personal mobile devices, reardless of physical location; support for cisco AnyConnect secure mobility solution, with ranular, application-level VPN capability, as well as native apple IOS and android VPN clients Site-to-site VPN Protect traffic, includin VOIP and client-server application data, across the distributed enterprise and branch offices Interated wireless access Interated wi-fi is available in the desktop form factor ( 5506w-x) for compact and simplified small office deployments Ruedized form factor A ruedized model ( 5506h-x), desined specifically for extreme environmental conditions, is available for critical infrastructure and control network applications Third-party ecosystem technoloy Open API that enables the third-party technoloy ecosystem to interate with existin customer work streams Interation with snort and OpenAppID Open source security interation with snort and OpenAppID for access to community resources and ability to easily customize security to address new and specific threats and applications quickly Collective intellience (CSI) security Unmatched security and web reputation intellience provides real-time threat intellience and security protection ROUTER-SWITCH.COM 4

6 PRODUCT PERFORMANCES AND SPECIFICATIONS OF CISCO 5500-X Table X Performance Feature Throuhput: 250 Mbps 250 Mbps 250 Mbps 450 Mbps 850 Mbps 300 Mbps 500 Mbps 1,100 Mbps 1,500 Mbps 1,750 Mbps Application Control (AVC) Throuhput: 125 Mbps 125 Mbps 125 Mbps 250 Mbps 450 Mbps 150 Mbps 250 Mbps 650 Mbps 1,000 Mbps 1,250 Mbps Application Control (AVC) and IPS Maximum 20,000; 20,000; , , , , , ,000 1,000,000 concurrent sessions Maximum Connections second New per 5,000 5,000 5,000 10,000 20,000 10,000 15,000 20,000 30,000 50,000 ROUTER-SWITCH.COM 5

7 Supported applications More than 3,000 URL cateories 80+ Number of URLs cateorized More than 280 million Centralized confiuration, loin, monitorin, reportin and Multi-device Security Manaer (CSM) and Firepower Manaement Center On-Device Manaement ASDM (version 7.3 or hiher required) ASDM ROUTER-SWITCH.COM 6

8 Table X Specification Feature Stateful inspection throuhput (maximum 1 ) 750 Mbps 750 Mbps 750 Mbps 1 Gbps 1.8 Gbps 1 Gbps 1.2 Gbps 2 Gbps 3 Gbps 4 Gbps Stateful inspection throuhput (multiprotocol 2 ) 300 Mbps 300 Mbps 300 Mbps 500 Mbps 900 Mbps 500 Mbps 600 Mbps 1 Gbps 1.5 Gbps 2 Gbps Triple Data Encryption Standard/Advanc ed Encryption Standard (3DES/AES) VPN throuhput Mbps 100 Mbps 100 Mbps 175 Mbps 250 Mbps 200 Mbps 250 Mbps 300 Mbps 400 Mbps 700 Mbps Users/nodes Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited ROUTER-SWITCH.COM 7

9 Feature IPsec VPN peers site-to-site 10; ; AnyConnect Plus/Apex VPN maximum simultaneous connections Virtual interfaces (VLANs) 5; ; ; Security contexts 5 (include d; maximum) N/A N/A N/A 2; 5 2; 5 0,0; 2,5 2;5 2; 20 2; 50 2; 100 Hih availability 4 Requires Requires Active/Standb Active/Active Active/Active Requires Active/Active Active/Active Active/Active Active/Active Security Plus Security Plus y and and Security Plus and and and and License; License; Active/Standb Active/Standb License; Active/Standb Active/Stand Active/Stand Active/Stand Active/Standb Active/Standb y y Active/Active y by by by y y and ROUTER-SWITCH.COM 8

10 Feature Active/Standb y Interated N/A Wireless N/A N/A N/A N/A N/A N/A N/A N/A Wireless Access Bands Point a/b//n; Max (See AP 702 datasheet for WiFi technical details) n wifi throuhput 54 Mbps; internal antenna only; local manaement or centralized via WLC Expansion slot N/A N/A N/A N/A N/A 1 interface 1 interface 1 interface 1 interface 1 interface card card card card card User-accessible Flash slot No No No No No No No 0-0 ROUTER-SWITCH.COM 9

11 Feature USB 2.0 ports USB port type USB port type USB port type USB port type USB port type A, Hih A, Hih A, Hih A, Hih A, Hih Speed 2.0 Speed 2.0 Speed 2.0 Speed 2.0 Speed 2.0 Interated I/O 8 x 1 Giabit Ethernet (GE) 8 x 1GE 4 x 1GE 8 x 1GE 8 x 1GE 6 GE copper 6 GE copper 8 GE copper 8 GE copper 8 GE copper Expansion I/O N/A N/A N/A N/A N/A 6 GE copper 6 GE copper 6 GE copper 6 GE copper 6 GE copper or or or or or 6 GE Small Form-Factor Pluable (SFP) 6 GE SFP 6 GE SFP 6 GE SFP 6 GE SFP Dedicated Yes (To be Yes (To be Yes (To be Yes (To be Yes (To be Yes (1 GE) Yes (1 GE) Yes (1 GE) Yes (1 GE) Yes (1 GE) manaement port shared with shared with shared with shared with shared with ), ), ), ), ), 10/100/ /100/ /100/ /100/ /100/1000 ROUTER-SWITCH.COM 10

12 Feature Serial ports 1 RJ-45 and 1 RJ-45 and 1 RJ-45 and 1 RJ-45 and 1 RJ-45 and 1 RJ-45 1 RJ-45 1 RJ-45 1 RJ-45 1 RJ-45 Mini USB Mini USB Mini USB Mini USB Mini USB Solid-state drive 50 GB msata 6 50 GB msata 6 50 GB msata 80 GB msata GB 1 slot, 120 GB 1 slot, 120 GB 1 slot, 2 slots, RAID 1 2 slots, RAID 1 tested heat for msata 6 multiline confiurator self- MLC SED 120 GB MLC SED 120 GB MLC SED 120 GB MLC SED encryptin drive (MLC SED) Memory 4 GB 4 GB 4 GB 8 GB 8 GB 4 GB 8 GB 8 GB 12 GB 16 GB System flash 8 GB 8 GB 8 GB 8 GB 8 GB 4 GB 8 GB 8 GB 8 GB 8 GB System bus Operatin Parameters ROUTER-SWITCH.COM 11

13 Feature Temperature 32 to 104 F (0 32 to 104 F (0-4 to 140 F (- 32 to 104 F (0 32 to 104 F (0 23 to 104 F (- 23 to 104 F (- 23 to 104 F (- 23 to 104 F (- 23 to 104 F (- to 40 C) to 40 C) 20 to 60 C) to 40 C) to 40 C) 5 to 40 C) 5 to 40 C) 5 to 40 C) 5 to 40 C) 5 to 40 C) Relative humidity Altitude 10,000 ft 10,000 ft 10,000 ft 10,000 ft 10,000 ft 10,000 ft 10,000 ft 10,000 ft (3048 m) (3048 m) (3050 m) (3048 m) (3048 m) (3050 m) (3050 m) (3050 m) Acousticnoise Fanless 0 dba Fanless 0 dba Fanless 0 dba 41.6 A- weihted decibels (dba) type 41.6 dba type 64.2 dba max 64.2 dba max 64.2 dba max 67.9 dba max 67.9 dba max 67.2 dba max 67.2 dba max Non-operatin Parameters ROUTER-SWITCH.COM 12

14 Feature Temperature 7-13 to 158ºF (- -13 to 158ºF (- -40 to 185ºF (- -13 to 158ºF (- -13 to 158ºF (- -13 to 158ºF (- -13 to 158ºF (- -13 to 158 F (- -13 to 158 F (- -13 to 158 F (- 25 to 70ºC) 25 to 70ºC) 40 to 85ºC) 25 to 70ºC) 25 to 70ºC) 25 to 70ºC) 25 to 70ºC) 25 to 70 C) 25 to 70 C) 25 to 70 C) Relative humidity 10 to 95 Altitude (4570 m) (4570 m) Power Input (per power supply) AC rane line External, 90 External, 90 External, 90 External, 90 External, to to to to to 240 voltae to 240 volts to 240 volts to 240 volts to 240 volts to 240 volts alternatin alternatin alternatin alternatin alternatin current () current () current () current () current () ROUTER-SWITCH.COM 13

15 Feature AC normal line 90 to to to to to to to to to to 240 voltae AC current N/A N/A N/A 0.25AC amps 0.25AC amps 4.85A 4.85A 4.85A 5A, 100 to 120V 5A, 100 to 120V 2.5A, 200 to 240V 2.5A, 200 to 240V AC frequency 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz 50/60 Hz Dual-power supplies None None None None None None None None Yes Yes DC domestic line N/A N/A N/A N/A N/A to to to to to 56 voltae volts direct VDC VDC VDC VDC current (VDC) (-48 VDC (-48 VDC (-48 VDC (-48 VDC (-48 VDC N/A N/A N/A N/A N/A -55 to -72 VDC -55 to -72 VDC -55 to -72 VDC -55 to -72 VDC -55 to -72 VDC ROUTER-SWITCH.COM 14

16 Feature DC international (-60 VDC (-60 VDC (-60 VDC (-60 VDC (-60 VDC line voltae DC current N/A N/A N/A N/A N/A 15A 15A 15A 15A 15A (maximum (maximum (maximum (maximum (maximum input) input) input) input) input) Output Steady state 3.0A 3.0A 51W 65W 75W 86W 90W Maximum peak 5A 5A 5.0A 5.0A 56W 70W 108W 125W 134W Maximum heat 205 British 205 Btu/hr 75 Btu/hr 205 Btu/hr 205 Btu/hr 192 Btu/hr 239 Btu/hr 369 Btu/hr 427 Btu/hr 458 Btu/hr dissipation thermal units (Btu)/hr Form factor Desktop, rack Desktop, rack Desktop, rack 1 rack unit 1 rack unit 1 rack unit 1RU, 19-in. 1RU, 19-in. 1RU, 19-in. 1RU, 19- mountable mountable mountable, (RU), 19-in. (RU), 19-in. (RU), 19-in. rack- rack- rack- in. rack- wall rack- rack- rack- mountable mountable mountable mountable mountable mountable mountable ROUTER-SWITCH.COM 15

17 Feature mountable, DIN-Rail Dimensions 1.72 x x 1.72 x x 2.72 x 9.05 x 1.72 x 17.2 x 1.72 x 17.2 x 1.67 x 16.7 x 1.67 x 16.7 x 1.75 x 17.5 x 1.67 x 16.7 x 1.67 x 16.7 x 9.23 in in in in in in in in in in. (H x W x D) (4.369 x (4.369 x (6.9 x (4.369 x (4.369 x (4.24 x 42.9 x (4.24 x 42.9 x (4.45 x x (4.24 x 42.9 x (4.24 x 42.9 x x x 23.0 x x x 39.5 cm) 39.5 cm) cm) 48.4 cm) 48.4 cm) cm) cm) cm) cm) cm) Weiht (with AC 4 lb (1.82 k) 4 lb (1.82 k) 7 lb (3.18 k) 8 lb (3 k) 8 lb (3 k) lb ( lb ( lb (10 k) lb ( lb (7.63 power supply) k) k) k) with sinle k) with sinle power supply power supply lb ( lb (8.61 k) with dual k) with dual power supply power supply 1 Maximum throuhput measured with UDP traffic under ideal conditions. 2 Multiprotocol = Traffic profile consistin primarily of TCP-based protocols/applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS. 3 VPN throuhput and sessions count depend on the device confiuration and VPN traffic patterns. These elements should be taken into consideration as part of your capacity plannin. ROUTER-SWITCH.COM 16

18 4 Hiher specifications are associated with the Security Plus license. 5 Separately licensed feature. For AnyConnect, licenses are purchased based on feature tier (Plus/Apex), term and authorized user license. See orderin uide below for detailed orderin instructions. 6 Usable space dependent upon system software. 7 Derate the maximum operatin temperature 1.5 C per 1000 ft above sea level. CISCO 5500-X SERIES BASIC ORDERING INFORMATION Part Number Product Description 5506-K X with services, 8GE Data, 1GE Mmt, AC, DES 5506-K X with services, 8GE Data, 1GE Mmt, AC, 3DES/AES 5506W-A-K9 5506W-A-X with services, WiFi for North America (NOT US), 8GE Data, 1GE Mmt, AC, 3DES/AES 5506W-B-K9 5506W-B-X with services, WiFi for US ONLY, 8GE Data, 1GE Mmt, AC, 3DES/AES 5506W-E-K9 5506W-E-X with services, WiFi for Europe, 8GE Data, 1GE Mmt, AC, 3DES/AES 5506W-Q-K9 5506W-Q-X with services, WiFi for Japan, 8GE Data, 1GE Mmt, AC, 3DES/AES 5506W-Z-K9 5506W-Z-X with services, WiFi for Australia/New Zealand, 8GE Data, 1GE Mmt, AC, 3DES/AES 5506H-SP-BUN-K9 5506H-X with services, ruedized, security plus, 4GE Data, 1GE Mmt, AC, 3DES/AES ROUTER-SWITCH.COM 17

19 5506H-SP-BUN-K8 5506H-X with services, ruedized, security plus, 4GE Data, 1GE Mmt, AC, DES 5508-K X with services, 8GE Data, 1GE Mmt, AC, DES 5508-K X with services, 8GE Data, 1GE Mmt, AC, 3DES/AES 5516-FPWR-K X with services, 8GE Data, 1GE Mmt, AC, DES 5516-FPWR-K X with services, 8GE Data, 1GE Mmt, AC, 3DES/AES 5512-FPWR-K X with, 6GE data, AC, 3DES/AES, SSD 5515-FPWR-K X with, 6GE data, AC, 3DES/AES, SSD 5525-FPWR-K X with, 8GE data, AC, 3DES/AES, SSD 5545-FPWR-K X with, 8GE data, AC, 3DES/AES, 2 SSD 5555-FPWR-K X with, 8GE data, AC, 3DES/AES, 2 SSD Note: To order licenses or cards, please feel free to contact us. SOURCES ROUTER-SWITCH.COM 18

Cisco ASA with FirePOWER Services

Cisco ASA with FirePOWER Services Data Sheet Cisco ASA with FirePOWER Meet the industry s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Cisco ASA with FirePOWER