Cisco ASA 5520 Model
Cisco ASA 5520 provides security services for medium-sized enterprises. The Cisco ASA 5520 and 5540 models are similar to the Cisco ASA 5510 model. They are all 1RUs, and the chassis external layouts are similar with the exception of the interfaces. The Cisco ASA 5520 and ASA 5540 models have four Gigabit Ethernet (10/100/1000) copper-based RJ-45 ports instead of the four Fast Ethernet ports in the Cisco ASA 5510 model. They also include a Fast Ethernet port for OOB management. Virtualization (security contexts) is supported in the Cisco ASA 5520 and 5540 models.
Figure 3-3 illustrates the front view of the Cisco ASA 5520 model.
Figure 3-3. Cisco ASA 5520 Front View
The front panel has the following five LEDs:
- Power Solid green indicates that the appliance is powered on.
- Status Flashing green indicates that the system is booting and power-up tests are running. Solid green indicates that the system tests passed and the system is operational. Amber solid indicates that the system tests failed.
- Active Flashing green indicates network activity.
- VPN Solid green indicates that one or more VPN tunnels are active.
- Flash Solid green indicates that the Flash memory card is being accessed.
Figure 3-4 illustrates the back view of the Cisco ASA 5520 model.
Figure 3-4. Cisco ASA 5520 Back View
The back view of ASA 5520 is identical to that of ASA 5510, except that the Cisco ASA 5520 has four Gigabit Ethernet (10/100/1000) ports whereas the Cisco ASA 5510 has four Fast Ethernet ports.
With the installation of a VPN Plus upgrade license, Cisco ASA 5520 can terminate up to 750 IPSec or WebVPN tunnels.
Table 3-2 lists the capabilities of the Cisco ASA 5520 appliance and its performance and connection limit numbers.
Description |
Without VPN Plus License |
With VPN Plus License |
---|---|---|
Firewall throughput |
Up to 450 Mbps |
Up to 450 Mbps |
3DES/AES IPSec VPN throughput |
Up to 225 Mbps |
Up to 225 Mbps |
Connections |
130,000 |
130,000 |
IPSec VPN peers |
300 |
750 |
WebVPN peers |
300 |
750 |
Interfaces |
Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management |
Four Gigabit Ethernet ports for security services and one Fast Ethernet port for OOB management |
Virtual interfaces (VLANs) |
25 |
25 |
High availability |
Active/Active and Active/Standby |
Active/Active and Active/Standby |
VPN scalability |
VPN clustering and load balancing |
VPN clustering and load balancing |
Threat mitigation throughput (IPS, firewall, and Anti-X) |
Up to 225 Mbps with AIP-SSM-10 Up to 375 Mbps with AIP-SSM-20 |
Up to 225 Mbps with AIP-SSM-10 Up to 375 Mbps with AIP-SSM-20 |
Security contexts |
Up to 10 |
Up to 10 |
Note
Performance numbers vary depending on the packet size and other applications running on the appliance.
Note
For more information about licensing, go to http://www.cisco.com/go/asa.