Data Sheet

Data Sheet
© 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 22
Additional features, including security virtualization through the use of security contexts and VLANs, increase service
velocity while reducing operational and administrative overhead.
Table 6 lists features of the Cisco ASA 5580-20 and 5580-40.
Table 6. Cisco ASA 5580 Adaptive Security Appliance Platform Capabilities and Capacities
Feature
ASA 5580-20
ASA 5580-40
Maximum Firewall Throughput
5 Gbps (real-world HTTP), 10 Gbps (max)
10 Gbps (real-world HTTP), 20 Gbps (max)
Maximum VPN Throughput
***
1 Gbps
1 Gbps
Concurrent Sessions
2,000,000
4,000,000
IPsec VPN Peers
10000
10000
Premium AnyConnect VPN Peer License
Levels
*
2,10, 25, 50, 100, 250, 500, 750, 1000, 2500,
5000, and 10,000
2,10, 25, 50, 100, 250, 500, 750, 1000, 2500,
5000, and 10,000
Security Contexts
Up to 250
Up to 250
Interfaces
2 Gigabit Ethernet management
2 Gigabit Ethernet management
Interface Card Slots
6
6
Interface Card Options
●
4-port 10/100/1000, RJ-45
●
4-port Gigabit Ethernet fiber, SR, LC
●
2-port 10 Gigabit Ethernet fiber, SR, LC
●
4-port 10/100/1000, RJ-45
●
4-port Gigabit Ethernet fiber, SR, LC
●
2-port 10 Gigabit Ethernet fiber, SR, LC
Virtual Interfaces (VLANs)
1024
1024
Scalability
VPN clustering and load balancing
VPN clustering and load balancing
High Availability
Active/Active
**
, Active/Standby
Active/Active
**
, Active/Standby
Redundant Power
Supported, second power supply optional
Supported, second power supply optional
Performance numbers tested and validated with Cisco ASA Software Release 8.4.1
Cisco ASA 5585-X Adaptive Security Appliances
Cisco ASA 5585-X Adaptive Security Appliances are tailored to meet the high performance needs of mission-critical
data centers and provide peace of mind with Cisco guaranteed coverage. Supporting the highest VPN session counts
and twice as many connections per second as competitive firewalls in its class, Cisco ASA 5585-X appliances meet
the growing needs of today’s most dynamic organizations. The appliances combine the world’s most proven firewall
with the industry’s most comprehensive, effective IPS, offering the most effective security solution in the industry to
significantly decrease business risk and address regulatory compliance—all in a compact 2-rack-unit footprint.
There are four Cisco ASA 5585 models: the entry-level Cisco ASA 5585-X with Security Services Processor -10
(SSP-10) delivers 2 Gbps of multi-protocol firewall performance; the Cisco ASA 5585-X with SSP-20 provides 5 Gbps
of multi-protocol firewall performance; the Cisco ASA 5585-X with SSP-40 delivers 10 Gbps of multi-protocol firewall
performance; and the high-end Cisco ASA 5585-X with SSP-60 provides 20 Gbps of multi-protocol firewall
performance.
All four ASA 5585-X models reliably deliver exceptional scalability to meet the demanding needs of mission-critical
data centers. The Cisco ASA 5585-X appliances can support up to 10,000 concurrent VPN sessions, while delivering
up to twice the connections per second and up to four times the session count of other firewalls at a similar
throughput. The appliances also provide twice the efficacy and the most comprehensive threat coverage of any IPS.
*
Separately licensed feature; includes two with base system
**
Available for the firewall feature set
***
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should be
taken in to consideration as part of your capacity planning.