Datasheet

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 15
Table 1 compares the features and capacities of Cisco ASA 5500 Series Adaptive Security Appliances for small
offices and branch locations.
Table 1. Cisco ASA 5500 Series Appliances for Small Offices and Branch Locations
Feature Cisco ASA 5505;
Security Plus
Cisco ASA 5510;
Security Plus
Cisco ASA 5512-X;
Security Plus
Cisco ASA 5515-X
Stateful Inspection
Throughput (Maximum
1
)
Up to 150 Mbps Up to 300 Mbps 1 Gbps 1.2 Gbps
Stateful Inspection
throughput (Multi-
Protocol
2
)
– – 500 Mbps 600 Mbps
IPS Throughput
3
Up to 75 Mbps with AIP-
SSC-5
Up to 150 Mbps with AIP-
SSM-10
Up to 300 Mbps with AIP-
SSM-20
250 Mbps
(Extra hardware not
required)
400 Mpbs
(Extra hardware not
required)
Context-Aware
Throughput
4
(Multiprotocol)
– – 200 Mbps 350 Mbps
3DES/AES VPN
Throughput
5
Up to 100 Mbps Up to 170 Mbps 200 Mbps 250 Mbps
Users/Nodes Unlimited Unlimited Unlimited Unlimited
IPsec VPN Peers 10; 25
*
250 250 250
Cisco Cloud Web
Security Users
25 75 100 250
Premium AnyConnect
VPN Peers
(Included/Maximum)
2/25 2/250 2/250 2/250
Concurrent Connections 10,000; 25,000
*
50,000; 130,000
*
100,000 250,000
New Connections/
Second
4000 9000 10,000 15,000
Virtual Interfaces
(VLANs)
3 (trunking disabled)/
20 (trunking enabled)
*
50; 100 50; 100 100
Security Contexts
(Included/Maximum)
6
Not available 0,0;
2,5
0,0;
2,5
2,5
High Availability Not supported
*
Not supported;
Active/Active and
Active/Standby
**
Not supported;
Active/Active and
Active/Standby
**
Active/Active and
Active/Standby
Expansion Slot 1 SSC 1 SSM 1 interface card 1 interface card
User-Accessible Flash
Slot
– 1 No No
USB 2.0 Ports 3 (1 on front, 2 on rear) 2 2 2
Integrated I/O 8 Fast Ethernet with 2 PoE
ports
5 Fast Ethernet/2 GE
Copper, 3 Fast Ethernet
6 GE Copper 6 GE Copper
Expansion I/O Not available 4 GE Copper or 6 GE Copper or 6 GE Copper or
1
Maximum throughput measured with UDP traffic under ideal conditions.
2
Multi-protocol= Traffic profile consisting primarily of TCP-based protocols/applications like HTTP, SMTP, FTP, IMAPv4,
BitTorrent, and DNS.
3
Firewall traffic that does not go through IPS service can have higher throughput.
4
Throughput was measured on ASA-CX with multi-protocol traffic profile with both Application Visibility Control (AVC) and Web
Security Essentials (WSE). Traffic logging was enabled as well.
5
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should
be taken into consideration as part of your capacity planning.
6
Separately licensed feature; includes two SSL licenses with base system.