Datasheet

Data Sheet
© 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 22
from the Cisco VPN FLEX licenses, which enable administrators to react to or plan for short-term bursts of
concurrent Premium VPN remote-access users, for up to a 2-month period.
Additional features, including security virtualization through the use of security contexts and VLANs, increase service
velocity while reducing operational and administrative overhead.
Table 6 lists features of the Cisco ASA 5580-20 and 5580-40.
Table 6. Cisco ASA 5580 Adaptive Security Appliance Platform Capabilities and Capacities
Feature ASA 5580-20 ASA 5580-40
Maximum Firewall Throughput 5 Gbps (real-world HTTP), 10 Gbps (max) 10 Gbps (real-world HTTP), 20 Gbps (max)
Maximum VPN Throughput
***
1 Gbps 1 Gbps
Concurrent Sessions 2,000,000 4,000,000
IPsec VPN Peers 10000 10000
Premium AnyConnect VPN Peer License
Levels
*
2,10, 25, 50, 100, 250, 500, 750, 1000, 2500,
5000, and 10,000
2,10, 25, 50, 100, 250, 500, 750, 1000, 2500,
5000, and 10,000
Security Contexts Up to 250 Up to 250
Interfaces 2 Gigabit Ethernet management 2 Gigabit Ethernet management
Interface Card Slots 6 6
Interface Card Options
●
4-port 10/100/1000, RJ-45
●
4-port Gigabit Ethernet fiber, SR, LC
●
2-port 10 Gigabit Ethernet fiber, SR, LC
●
4-port 10/100/1000, RJ-45
●
4-port Gigabit Ethernet fiber, SR, LC
●
2-port 10 Gigabit Ethernet fiber, SR, LC
Virtual Interfaces (VLANs) 1024 1024
Scalability VPN clustering and load balancing VPN clustering and load balancing
High Availability Active/Active
**
, Active/Standby Active/Active
**
, Active/Standby
Redundant Power Supported, second power supply optional Supported, second power supply optional
Performance numbers tested and validated with Cisco ASA Software Release 8.4.1
Cisco ASA 5585-X Adaptive Security Appliances
Cisco ASA 5585-X Adaptive Security Appliances are tailored to meet the high performance needs of mission-critical
data centers and provide peace of mind with Cisco guaranteed coverage. Supporting the highest VPN session
counts and twice as many connections per second as competitive firewalls in its class, Cisco ASA 5585-X
appliances meet the growing needs of today’s most dynamic organizations. The appliances combine the world’s
most proven firewall with the industry’s most comprehensive, effective IPS, offering the most effective security
solution in the industry to significantly decrease business risk and address regulatory compliance—all in a compact
2-rack-unit footprint.
There are four Cisco ASA 5585 models: the entry-level Cisco ASA 5585-X with Security Services Processor -10
(SSP-10) delivers 3 Gbps of multi-protocol firewall performance; the Cisco ASA 5585-X with SSP-20 provides 7
Gbps of multi-protocol firewall performance; the Cisco ASA 5585-X with SSP-40 delivers 12 Gbps of multi-protocol
firewall performance; and the high-end Cisco ASA 5585-X with SSP-60 provides 20 Gbps of multi-protocol firewall
performance.
All four ASA 5585-X models reliably deliver exceptional scalability to meet the demanding needs of mission-critical
data centers. The Cisco ASA 5585-X appliances can support up to 10,000 concurrent VPN sessions, while delivering
*
Separately licensed feature; includes two with base system
**
Available for the firewall feature set
***
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should be
taken in to consideration as part of your capacity planning.