background image

 
 
 

 

All contents are Copyright © 1992–2005 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. 

Page 1 of 19 

 
 
 

DATA SHEET 

CISCO ASA SOFTWARE VERSION 7.0 
 

Cisco

®

 ASA 5500 Series adaptive security appliances deliver numerous market-leading, high-performance security and 

VPN

 

services for small and medium-sized businesses (SMBs), enterprises, and service providers—in addition to providing 

unprecedented services flexibility and extensibility and lower deployment and operations costs. 

PRODUCT OVERVIEW 

Cisco

®

 ASA 5500 Series adaptive security appliances are purpose-built solutions that combine best-of-breed security and VPN services with the 

innovative Cisco Adaptive Identification and Mitigation (AIM) architecture. Designed as a key component of the Cisco Self-Defending Network, 

the Cisco ASA 5500 Series provides proactive threat defense that stops attacks before they spread through the network, controls network activity and 

application traffic, and delivers flexible VPN connectivity. The result is a powerful multifunction network security appliance family that provides the 

security breadth and depth for protecting SMBs and enterprise networks while reducing the overall deployment and operations costs and 

complexities associated with providing this new level of security. 

The Cisco ASA 5500 Series delivers a powerful combination of multiple market-proven technologies in a single platform, making it operationally 

and economically feasible to deploy comprehensive security services to more locations. And its multifunction security profile virtually eliminates the 

difficult—and risky—decision of making trade-offs between robust security protection and the operational costs associated with multiple devices in 

numerous locations. 

The Cisco ASA 5500 Series helps businesses more effectively and efficiently protect their networks while delivering exceptional investment 

protection through the following key elements: 

 

Market-proven security and VPN capabilities—Full-featured, high-performance firewall, intrusion prevention system (IPS), network antivirus, 

and IP Security/Secure Sockets Layer (IPSec/SSL) VPN technologies deliver robust application security, user- and application-based access 
control, worm and virus mitigation, malware protection, and remote user and site connectivity. 

 

Extensible Adaptive Identification and Mitigation services architecture—Taking advantage of a modular services processing and policy 

framework, the Cisco Adaptive Identification and Mitigation architecture enables the application of specific security or network services on 
a per traffic flow basis, delivering highly granular policy controls and anti-x protection with streamlined traffic processing. The efficiencies 
of the Cisco ASA 5500 Series AIM architecture, as well as software and hardware extensibility through user-installable security services 
modules (SSMs), advance the evolution of existing services as well as deployment of new services without requiring a platform replacement 
or performance compromise. As the architectural foundation of the Cisco ASA 5500 Series, AIM enables highly customizable security policies 
and unprecedented services extensibility to help protect against the fast-evolving threat environment. 

 

Reduced deployment and operations costs—These multifunction appliances allow for platform, configuration, and management standardization, 

helping decrease the costs of deployment and ongoing operations. 

MARKET-PROVEN SECURITY AND VPN CAPABILITIES 

The Cisco ASA 5500 Series leverages Cisco’s expertise in developing industry-leading and award-winning security and VPN solutions, and 

integrates the latest technologies from Cisco PIX

®

 500 Series Security Appliances, Cisco IPS 4200 Series Intrusion Prevention Systems, and 

Cisco VPN 3000 Series Concentrators. By combining these technologies, the Cisco ASA 5500 Series delivers an unmatched, best-of-breed solution 

that stops the broadest range of threats and provides businesses with flexible, secure connectivity options. The breadth and depth of security and 

networking services provided by the Cisco ASA 5500 Series enable it to protect any area of the network, including the most common threat vectors 

such as mobile users, remote sites, and unmanaged desktops and servers. As a key component of the Cisco Adaptive Threat Defense and flexible 

Summary of Contents for Cisco ASA 5500 Series

Page 1: ...network antivirus and IP Security Secure Sockets Layer IPSec SSL VPN technologies deliver robust application security user and application based access control worm and virus mitigation malware protection and remote user and site connectivity Extensible Adaptive Identification and Mitigation services architecture Taking advantage of a modular services processing and policy framework the Cisco Adap...

Page 2: ...k detection coupled with advanced analysis techniques resulting in highly accurate threat classification that helps ensure appropriate mitigation actions are taken with no impact on legitimate network traffic Advanced Detection Techniques To help ensure that threats do not go unnoticed the Cisco ASA 5500 Series offers numerous methods to identify policy violations anomalous activity and vulnerabil...

Page 3: ...ologies that deliver tailored solutions to suit connectivity requirements providing employees company managed desktops with robust customizable remote access through an IPSec VPN For situations where endpoints are not company managed such as extranets Internet kiosks or employee owned desktops the Cisco ASA 5500 Series delivers WebVPN for SSL based remote access Taking advantage of Cisco remote ac...

Page 4: ...ents that require simultaneous dual stack support of IPv4 and IPv6 Quality of Service QoS Low Latency Queuing LLQ and Traffic Policing features support applications with demanding QoS requirements such as voice or video helping ensure an end to end network QoS policy latency sensitive traffic can be prioritized ahead of file transfer and other more delay tolerant traffic IP phone zero touch provis...

Page 5: ...cess VPN capabilities Alternatively it serves equally well in the network interior for interdepartmental access control and to guard against worms viruses and other malicious code that internal users may unwittingly bring into a network In small business and branch office environments the Cisco ASA 5500 Series serves as an all in one solution offering comprehensive threat prevention and VPN servic...

Page 6: ...ty of desktop server and network security solutions to determine the actual attack path and provide mitigation options thus simplifying security incident management for environments where dedicated security analysts may not be available Additionally Cisco offers the CiscoWorks Security Information Management Solution CiscoWorks SIMS which is well suited for large enterprises and managed security s...

Page 7: ...e tracking response validation Multipurpose Internet Mail Extensions MIME type validation and content control Uniform Resource Identifier URI length enforcement and more Tunneling Application Control Provides advanced inspection services to detect and optionally block instant messaging peer to peer file sharing and other applications tunneling through Web application ports Blocks popular instant m...

Page 8: ...in real time networking environments TAPI JTAPI over CTIQBE Security Services Supports inspection of various Cisco TAPI and JTAPI based applications that use CTIQBE including Cisco IP SoftPhone and the Cisco Customer Response solution Fragmented and Segmented Multimedia Stream Inspection Enables inspection of H 323 SIP and SCCP based voice and multimedia streams that have been fragmented or segmen...

Page 9: ...ts inbound and outbound access control lists ACLs for interfaces time based ACLs and per user or group policies for improved control over network and application usage Simplifies management of security policies by giving administrators the ability to create reusable network and service object groups that can be referenced by multiple security policies simplifying initial policy definition and ongo...

Page 10: ...PN Client Available on wide range of platforms including Microsoft Windows 98 ME NT 2000 and XP Sun Solaris Intel based Linux distributions and Apple Macintosh OS X Provides many innovative features including dynamic security policy downloading from Cisco Easy VPN Server enabled products automatic failover to back up Easy VPN Servers administrator customizable distributions and more Integrates wit...

Page 11: ... of a system or network failure network sessions are automatically transitioned between firewalls with complete transparency to users Active Active Stateful Failover Provides a complementary solution to Active Standby failover where both systems in an Active Active failover pair actively pass network traffic simultaneously effectively doubling the throughput of the failover pair for bursty network...

Page 12: ...ath routes Routing Information Protocol RIP Dynamic Routing Enables secure integration in RIP based enterprise networks by learning routing updates for both versions 1 and 2 of the protocol Protects against RIP based reconnaissance activities and DoS attacks by supporting plaintext and keyed MD5 authentication methods for RIPv2 Multicast Routing Streamlines the delivery of multimedia traffic in vi...

Page 13: ...l user database or through integration with enterprise databases either directly using TACACS and RADIUS or indirectly with Cisco Secure Access Control Server ACS Supports up to 16 levels of customizable administrative roles so that businesses can grant administrators and operations personnel the appropriate level of access to each appliance for example monitoring only access read only access to t...

Page 14: ...configuration data certificates and key material stored on Cisco ASA 5500 Series appliances by automatically wiping flash memory contents if an asset recovery or password reset procedure occurs if preconfigured to do so Scheduled System Reloads Allows administrators to schedule a reload on a Cisco ASA 5500 Series appliance either at a specific time or at an offset from the current time making it s...

Page 15: ... a Security Plus license This license increases port density on the platform by enabling the fourth Fast Ethernet port and removing the restriction on the out of band management port so that it can be repurposed to a general traffic port if desired Integration into switched network environments is simplified with this license as support for up to 10 VLANs is enabled Furthermore this upgrade licens...

Page 16: ...products listed in Table 3 for site to site VPN connectivity Table 3 Site to Site VPN Compatibility Between Cisco ASA 5500 Series and VPN Products VPN Gateway Versions Supported Cisco ASA 5500 Series Appliances Cisco ASA Software Version 7 0 1 and later Cisco IOS Software Routers Cisco IOS Software Release 12 1 6 T and later Cisco PIX Security Appliances Cisco PIX Security Appliance Software Versi...

Page 17: ...forms Supported Cisco ASA 5510 Adaptive Security Appliance Cisco ASA 5520 Adaptive Security Appliance Cisco ASA 5540 Adaptive Security Appliance Minimum RAM Cisco ASA 5510 256 MB Cisco ASA 5520 512 MB Cisco ASA 5540 1024 MB Minimum System Flash Memory 64 MB Expansion Cards Supported Cisco AIP SSM AIP SSM 10 AIP SSM 20 ORDERING INFORMATION To place an order visit the Cisco Ordering Home Page or ref...

Page 18: ...sion 7 0 Cisco Adaptive Security Device Manager Version 5 0 SERVICE AND SUPPORT Cisco offers a wide range of services programs to accelerate customer success These innovative service programs are delivered through a unique combination of people processes tools and partners resulting in high levels of customer satisfaction Cisco services help you protect your network investment optimize network ope...

Page 19: ...ssia Saudi Arabia Scotland Singapore Slovakia Slovenia South Africa Spain Sweden Switzerland Taiwan Thailand Turkey Ukraine United Kingdom United States Venezuela Vietnam Zimbabwe Copyright 2005 Cisco Systems Inc All rights reserved CCSP CCVP the Cisco Square Bridge logo Follow Me Browsing and StackWise are trademarks of Cisco Systems Inc Changing the Way We Work Live Play and Learn and iQuick Stu...

Page 20: ... 2005 Cisco Systems Inc All rights reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 20 of 20 ...

Reviews: