Specifications

Chapter 5 VPN and Security
5-3
Cisco PIX Security Appliance Series
Key Features
• Security—Purpose-built appliance with a proprietary, hardened operating system
• Performance—Stateful inspection firewall capable of up to 500,000 concurrent
connections and 1.7 Gbps of throughput (at 1400-byte packets on Cisco PIX 535
Security Appliances)
• High availability—Award-winning, active/standby firewall stateful failover provides
enterprise-class, cost-effective resiliency
• Virtual Private Networking (VPN)—Supports both standards-based IPsec and
L2TP/PPTP-based VPN services
• Optional PIX VPN Accelerator Card+—Scales 3DES/AES-256 VPN throughput up to
495 Mbps, using specialized co-processors designed for accelerating cryptographic
operations
• Free software Cisco VPN Client provides secure connectivity across a broad range of
platforms including Windows, Mac OS X, Linux and Solaris
• Network Address Translation (NAT) and Port Address Translation (PAT)—Conceals
internal IP addresses and expands network address space
• Denial-of-Service (DoS) Attack Protection—Protects the firewall, internal servers and
clients from disruptive hacking attempts
• OSPF dynamic routing support for improved network reliability and performance
• VLAN trunking (802.1q tag) support for simplified deployment in switched network
environments
• Multimedia and VoIP support for widely popular standards, H.232 v4, TAPI, JTAPI,
RTSP, SIP, MGCP and SCCP
• Web-Based PIX Device Manager (PDM)—For simplified configuration, real-time and
historical reports, performance baselines and security events information
• Auto Update, SSH, SNMP, TFTP, HTTPS, and telnet for remote management
• Support from two 10/100 Ethernet interfaces to up to nine Gigabit Ethernet interfaces
PIX 515E
• Small-to-Medium Business (SMB) integrated security appliance
• Up to 190 Mbps of firewall throughput
1
• Up to 130 Mbps of 3DES/AES-256 VPN throughput
1
using hardware acceleration (integrated in select models,
optional for others)
• VPN concentrator services (Easy VPN Server) for up to 2,000 remote users
• Up to six 10/100 FE interfaces
• VLAN trunking (802.1q tag-based) and OSPF dynamic routing support
• Active/standby firewall stateful failover support
PIX 525
• Enterprise-class integrated security appliance
• Up to 330 Mbps of firewall throughput
1
• Up to 145 Mbps of 3DES and 135 Mbps of AES-256 VPN throughput
1
using hardware acceleration (integrated
in select models, optional for others)
• VPN concentrator services (Easy VPN Server) for up to 2,000 remote users
• Gigabit Ethernet support; Up to eight 10/100 FE or three Gigabit Ethernet interfaces
• VLAN trunking (802.1q tag-based) and OSPF dynamic routing support
• Active/standby firewall stateful failover support
PIX 535
• Carrier class large enterprise and service provider firewall appliance
• Up to 1.7 Gbps of firewall throughput
1
• Up to 425 Mbps of 3DES/AES-256 VPN throughput using hardware acceleration (integrated in select models,
optional for others)
• VPN concentrator services (Easy VPN Server) for up to 2,000 remote users
• Gigabit Ethernet throughput; Up to ten 10/100 FE or nine Gigabit Ethernet interfaces
• VLAN trunking (802.1q tag-based) and OSPF dynamic routing support
• Redundant, hot-swappable power supplies
• Active/standby firewall stateful failover support
1. At 1400-byte packets
Sell This Product When a Customer Needs These Features