Cisco SA 500 Series Security Appliances for Small Business :
These all-in-one security solutions are designed for businesses with fewer than 100 employees. They combine firewall, VPN, and optional intrusion prevention system (IPS), email, and web security capabilities. Whether in the office or working remotely, your employees can securely access the resources they need, while your business is protected from unauthorized access and Internet threats.
All-in-one device: Combines firewall, IPS, email and web security, and secure access in one box
Secure wireless and remote access: Easily allow mobile workers and branch offices remote, secure access with flexible and easy to use built-in VPNs
Low overhead: Reduce costs associated with deployment and ongoing management and monitoring of the security solution
Affordable service coverage: Deliver service value and peace of mind at a price you can afford
Optional email and web security capabilities:
Cisco ProtectLink Gateway: Cloud-based service that provides strong, automatically updated email and web security
VeriSign Identity Protection (VIP): An easy and effective second level of authentication
Intrusion prevention system (IPS): Identify and take action to stop possible intrusions into the business network
Peer-to-peer, IM traffic blocking and protocol inspection to help increase network security, employee productivity, and network availability for business traffic
Cisco SA 500 Series Security Appliance
:
Models
SA 520
SA 520W
SA 540
Product Image
SKU
SA520-K9
SA520W-K9
SA540-K9
Ports
Stateful packet inspection throughput*
200 Mbps
200 Mbps
300 Mbps
Firewall and email and web security throughput*
200 Mbps
200 Mbps
300 Mbps
Connections
15,000
15,000
40,000
Rules
100
100
100
Schedules
Yes
Yes
Yes
IPS
Yes
Yes
Yes
Peer-to-peer and IM blocking
Yes
Yes
Yes
VPN
Triple Data Encryption Standard (3DES)/ Advanced Encryption Standard (AES) VPN throughput*
65 Mbps
65 Mbps
85 Mbps
IPsec VPN tunnels
50 max
50 max
100 max
SSL VPN tunnels
2 seats included; license required to upgrade to 25 seats (max)
2 seats included; license required to upgrade to 25 seats (max)
50 seats (max) included
Dead peer detection
Yes
Yes
Yes
IPsec Network Address Translation (NAT) traversal
Yes
Yes
Yes
NetBIOS broadcast over VPN
Yes
Yes
Yes
Cisco ProtectLink Gateway
URL filtering
80+ categories
80+ categories
80+ categories
Web threat protection
Yes
Yes
Yes
Antispam protection
Yes
Yes
Yes
Virus patterns
More than 3 million
More than 3 million
More than 3 million
Spyware patterns
More than 420,000
More than 420,000
More than 420,000
Wireless
802.11b/g/n
No
Yes
No
2 x 3 multiple input, multiple output (MIMO)
No
Yes
No
2.4 GHz
No
Yes
No
Wi-Fi Multimedia (WMM) quality of service (QoS)
No
Yes
No
Unscheduled automatic power save delivery (U-APSD) (WMM Power Save [WMM-PS])
All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable
4 LAN ports
1 WAN port
1 optional port for use as LAN, WAN, or DMZ port
1 USB 2.0 port
1 power switch
All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable
4 LAN ports
1 WAN port
1 optional port for use as LAN, WAN, or DMZ port
1 USB 2.0 port
1 power switch
3 external antennas
All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable
8 LAN ports
1 WAN port
1 optional port for use as LAN, WAN, or DMZ port
1 USB 2.0 port
1 power switch
Environmental operating temperature
32° to 104°F
(0° to 40°C)
32° to 104°F
(0° to 40°C)
32° to 104°F
(0° to 40°C)
Storage temperature
-4° to 158°F
(-20° to 70°C)
-4° to 158°F
(-20° to 70°C)
-4° to 158°F
(-20° to 70°C)
Internal Power Supply
Voltage range
90 to 264 VAC single phase
90 to 264 VAC single phase
90 to 264 VAC single phase
Input frequency
47 to 63 Hz
47 to 63 Hz
47 to 63 Hz
Output voltage regulation
11.4V ~ 12.6V
11.4V ~ 12.6V
11.4V ~ 12.6V
Output current
Max 2.5A
Max 2.5A
Max 2.5A
Physical Specifications
Form factor
1 RU, 19-in. rack mountable
1 RU, 19-in. rack mountable
1 RU, 19-in. rack mountable
Dimensions (H x W x D)
1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm)
1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm) without antennas
1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm)
Weight (with internal power supply)
4.91 lb (2.23 kg)
5.15 lb (2.34 kg)
5.14 lb (2.34 kg)
Models and Specifications
SA 520
SA 520W
SA 540
Cisco ASA 5500 Series Adaptive Security Appliances:
Stop security attacks before they affect business continuity. Cisco ASA 5500 Series Adaptive Security Appliances provide intelligent threat defense and highly secure communications services. These solutions help organizations lower their deployment and operational costs while delivering comprehensive network security for networks of all sizes.
Deploy Comprehensive Network Security
Cisco adaptive security appliances integrate industry-leading firewalls, unified communications security, VPN technology, intrusion prevention, and content security in a unified platform to:
Stop attacks before they penetrate the network perimeter
Protect resources and data, as well as voice, video, and multimedia traffic
Control network and application activity
Reduce deployment and operational costs
Cisco ASA 5500 Series Adaptive Security Appliances also provide:
Adaptable architecture for rapid and customized security services deployment
Advanced intrusion prevention services that defend against a broad range of threats
Highly secure remote access and unified communications to enhance mobility, collaboration, and productivity
Cisco ASA 5500 Series Model/License
Cisco ASA 5580-20
Cisco ASA 5580-40
Cisco ASA 5585-X with SSP-10
Cisco ASA 5585-X with SSP-20
Cisco ASA 5585-X with SSP-40
Cisco ASA 5585-X with SSP-60
Product Image
(click to enlarge)
Network Location
Data Center, Campus
Data Center, Campus
Internet Edge, Campus
Data Center, Campus
Data Center, Campus
Data Center, Campus
Performance Summary
Firewall Throughput1
5 Gbps (real-world HTTP), 10 Gbps (max)
10 Gbps (real-world HTTP), 20 Gbps (max)
2 Gbps (multi-protocol), 4 Gbps (max)
5 Gbps (multi-protocol), 10 Gbps (max)
10 Gbps (multi-protocol), 20 Gbps (max)
20 Gbps (multi-protocol), 35 Gbps (max)
Maximum Firewall Connections
1,000,000
2,000,000
750,000
1,000,000
2,000,000
2,000,000
Maximum Firewall Connections/Second
90,000
150,000
50,000
125,000
200,000
350,000
Packets per second (64 byte)
2,500,000
4,000,000
1,500,000
3,000,000
5,000,000
9,000,000
Maximum 3DES/AES VPN Throughput2
1 Gbps
1 Gbps
1 Gbps
2 Gbps
3 Gbps
5 Gbps
Maximum Site-to-Site and Remote Access VPN Sessions
Cisco Adaptive Security Appliance Software Version (latest)
8.3
8.3
8.2.3
8.2.3
8.2.3
8.2.3
Application-Layer Firewall Services
Yes
Yes
Yes
Yes
Yes
Yes
Layer 2 Transparent Firewalling
Yes
Yes
Yes
Yes
Yes
Yes
Security Contexts (included/maximum3)
2/50
2/50
2/50
2/50
2/50
2/50
GTP/GPRS Inspection3
Yes
Yes
Yes
Yes
Yes
Yes
High-Availability Support4
A/A and A/S
A/A and A/S
A/A and A/S
A/A and A/S
A/A and A/S
A/A and A/S
SSL and IPsec VPN Services
Yes
Yes
Yes
Yes
Yes
Yes
VPN Clustering and Load Balancing
Yes
Yes
Yes
Yes
Yes
Yes
Advanced Endpoint Assessment3
Yes
Yes
Yes
Yes
Yes
Yes
1 Maximum throughput measured under ideal test conditions 2 VPN throughput and sessions
count depend on the ASA device configuration and VPN traffic patterns.
These elements should be taken in to consideration as part of your
capacity planning. 3 Licensed features 4 A/S = Active/Standby; A/A = Active/Active
