© 2005 Cisco Systems, Inc. All rights reserved.
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Page 15 of 20
availability or virtual firewall services. Several tiers of security context licenses are available, including 5, 10, 20, and 50 security contexts. This
license type and related feature set are not supported on the Cisco ASA 5510.
GTP Inspection License
The Cisco ASA 5520 and 5540 can provide advanced security services for GTP 3G Mobile Wireless environments upon purchase and installation
of the GTP Inspection license. This license type and related feature set are not supported on the Cisco ASA 5510.
Encryption Licenses
3DES/AES Encryption License
The Cisco ASA 5500 Series supports two different levels of encryption. By default, all Cisco ASA 5500 Series appliances support 56-bit DES, 56-bit
RC4, 512-bit RSA, and 512-bit Digital Signature Algorithm (DSA) encryption algorithms. Customers can optionally order a strong encryption
license that adds support for 168-bit Triple Data Encryption Standard (3DES), up to 128-bit RC4, up to 4096-bit RSA, and up to 1024-bit DSA
encryption algorithms. A strong encryption license can also be obtained subsequently through Cisco.com, if it was not ordered with the appliance
originally.
Platform Licenses
Cisco ASA 5510 Adaptive Security Appliance Security Plus License
Businesses can significantly extend the capabilities of the Cisco ASA 5510 by purchasing and installing a Security Plus license. This license
increases port density on the platform by enabling the fourth Fast Ethernet port and removing the restriction on the out-of-band management port so
that it can be repurposed to a general traffic port, if desired. Integration into switched network environments is simplified with this license, as support
for up to 10 VLANs is enabled. Furthermore, this upgrade license maximizes business continuity by enabling Active/Standby high-availability
services and triples VPN capacity by supporting up to 150 concurrent VPN connections from mobile users, remote sites, and business partners.
Cisco ASA 5520 Adaptive Security Appliance VPN Plus License
Businesses can extend the IPSec and SSL VPN capacity of their Cisco ASA 5520 with a VPN Plus license, which more than doubles the platform
VPN capacity to support up to 750 concurrent VPN connections from mobile users, remote sites, and business partners.
Cisco ASA 5540 Adaptive Security Appliance VPN Plus and VPN Premium Licenses
Businesses have multiple options for extending the IPSec and SSL VPN capacity of their Cisco ASA 5540. With a VPN Plus license, businesses
quadruple the platform base VPN capacity to support up to 2000 concurrent IPSec VPN and 1250 WebVPN connections from mobile users, remote
sites, and business partners. This license maximizes the platform VPN capacity, and offers 10 times the capacity of the base platform, supporting up
to 5000 concurrent IPSec VPN and 2500 WebVPN connections.
PRODUCT SPECIFICATIONS
Tables 2–4 provide information on compatibility between Cisco ASA 5500 Series appliances and VPN clients, VPN products, and certain
cryptographic standards.
