Preview of Cisco New Low-End ASA 5500-X Appliances - Cisco ASA 5506-X & 5508-X

Date

Your name

Your team

Cisco Confidential 2© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Disclaimer

• Many of the new features described herein remain in varying stages of development and will be offered on a when-and-if-available basis. The features in the EFT and any future product release are subject to change at the sole discretion of Cisco. Accordingly, Cisco will have no liability for delay in the delivery or failure to deliver any future products or features described in this document and any such delay or failure would not in any way imply the right to return any previously purchased Cisco products.

Cisco Confidential 3© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco ASA 5500-X Series Portfolio Comprehensive Solutions from SOHO to the Data Center

Perf

orm

ance

an

d S

cala

bili

ty

Data Center

CampusBranch Office Internet

Edge

ASA 5585-X SSP-20(10 Gbps, 125K cps)

ASA 5585-X SSP-60(40 Gbps, 350K cps)

ASA 5585-X SSP-40(20 Gbps, 200K cps)

ASA 5585-X SSP-10(4 Gbps, 50K cps)ASA 5555-X

(4 Gbps,50K cps)

ASA 5545-X (3 Gbps,30K cps)

ASA 5525-X (2 Gbps,20K cps)

ASA 5512-X (1 Gbps, 10K cps)

ASA 5515-X (1.2 Gbps,15K cps)

SOHO

ASA 5505 (150 Mbps, 4K cps)

NGFW (ASA+FirePOWER

Services)

New

Trusted Firewall/VPN

Not yet refresh

Cisco Confidential 4© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Introducing New Cisco Low-End Security Appliance ASA 5506-X & ASA 5508-X

• Two platforms – ASA 5506-X and 5508-X

• Three models:• ASA 5506-X – Desktop form factor

• ASA 5506W-X – ASA5506 with WiFi

• ASA 5508-X – Rackmount form factor

1 Gbps Firewall200 Mbps VPN

ASA 5512-X

1.2 Gbps Firewall250 Mbps VPN

ASA 5515-X

2 Gbps Firewall300 Mbps VPN

ASA 5525-X

3 Gbps Firewall500 Mbps VPN

ASA 5545-X

4 Gbps Firewall700 Mbps VPN

ASA 5555-X

150M FW100MpsVPN

Perf

orm

ance

&

Sca

labili

ty

Branch Office Internet EdgeSOHO

ASA 5506-X

375 Mbps FW125 Mbps VPNNGFW Ready

ASA 5508-X

750 M FW175 M VPNNGFW Ready

1Gbps Firewall

• Broaden Cisco <1Gbps NGFW security appliance options

• Target FCS in Q1CY15

Cisco Confidential 5© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco ASA 5506-X and 5508-X Feature Highlights

COLLECTIVESECURITYINTELLIGENCE

Management Center

NEXT- GENERATION FIREWALL

NEXT- GENERATION INTRUSION

PREVENTION

ADVANCED MALWARE PROTECTION

CONTEXTUAL AWARENESS HOSTS | VIRTUAL MOBILE

APPLIANCES

FirePOWER Services on ASA

ASDM

• Trusted firewall with enhanced hardware – ASA OS; multi-core CPU; built-in SSD memory, WiFi model option

• Improved performance & scalability – 2x or 5x of ASA5505 firewall performance

• Best-in-class NGFW (ASA FirePOWER services) ready – prevent advanced threats

• Flexible management options – CLI, ASDM, CSM+FireSight for centralized management

Cisco Confidential 6© 2013-2014 Cisco and/or its affiliates. All rights reserved.

WiFi Feature Highlights in Cisco ASA 5506W-X

• Built based on Cisco industry leading Access Point – AP702i

• Support 802.11a/g/n

• 2x3 MIMO with Dual radio support

• Up to 600Mbps data rate

• Multiple SSID support

• Simplified network management deployment options

• Standalone & Controller-based deployment options

Cisco AP702i

Cisco ASA 5506-X

ASA 5506W-X

Cisco Confidential 7© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Security Appliance <1Gbps FW Models

• ASA 5506-X and ASA 5508-X offer enhanced hardware, performance, and services than ASA 5505

Category Model ASA 5505 ASA 5506-X ASA 5506W-X ASA 5508-X

Hardware CPU 1Cx500MHz Multi-core 1.7GHz Multi-core 1.7GHz

Multi-core 2GHz

RAM/Flash 512M/128M 4G/8GB 4G/8GB 8G/8GB SSD none 64GB 64GB 120GB I/O 8xGE 8xGE (no L2SW) 8xGE (no L2SW) 8xGE (no L2SW)

PoE 2x PoE 0 0 0 WiFi no no Yes no

Form factor Desktop Desktop Desktop Rackmount

ASA Performance

FW Throughput 150M 375M 375M 750MVPN Throughput 100M 125M 125M 175MMax Sessions 25k 50k 50k 100k

*S2S & IPSec Client VPN 25 150 150 150

SSL Client 25 50 50 100NGFW (FirePOWER) Services

IPS Yes (SSC) Yes Yes Yes

Application Control no Yes Yes YesURL Filtering no Yes Yes Yes

AMP (Advanced Malware Protection) no Yes Yes Yes

New

Existing

New

New

*EzVPN Hardware client not included (evaluating new approach)

Cisco Confidential 8© 2013-2014 Cisco and/or its affiliates. All rights reserved.

ASA 5506-X & 5508-X Packaging No user based license

SecPlus license (perpetual) – high availability, more VLANs, higher max sessions, etc. support

All NGFW services available through one (subscription) SKU (1-year and 3-year subscription terms)

Hardware + FirePOWER services bundle and Hardware + FirePOWER + SecPlus bundle options available

HW+NGFW bundle SKUs

Hardware SKUs

*AVC is targeted to be included as part of support contract

ASA 5506-XASA 5508-X

NGIPSURL FilteringAMP

One term based subscription

SKU*

One perpetual

license SKU

SecPlus

HW+NGFW+SecPlus bundle SKUs

Cisco Confidential 9© 2013-2014 Cisco and/or its affiliates. All rights reserved.

ASA 5506-X & 5508-X Packaging (Cont’)

Simplify sales, ordering, management experiences

What are my “base” needs?

harden my protection against threats?

HW+NGFW bundle SKUs

Hardware SKUs

1-year or 3-year term?

*AVC is targeted to be included as part of support contract

ASA 5506-XASA 5508-X

NGIPSURL FilteringAMP

One term based subscription

SKU*

One perpetual

license SKU

SecPlus

HW+NGFW+SecPlus bundle SKUs

ASA 5506W-X

HA, more scalability needed?

Thank you.