Cisco ASA 5510 Adaptive Security Appliance The Cisco ASA 5510 Adaptive Security Appliance delivers advanced security and networking services for small and medium-sized businesses and enterprise remote/branch offices in an easy-to-deploy, cost-effective appliance. These services can be easily managed and monitored by the integrated, Cisco Adaptive Security Device Manager application, thus reducing the overall deployment and operations costs associated with providing this high level of security. The Cisco ASA 5510 Adaptive Security Appliance provides high-performance firewall and VPN services and five integrated 10/100 Fast Ethernet interfaces. It optionally provides high-performance intrusion prevention and worm mitigation services through the AIP SSM, or comprehensive malware protection services through the CSC SSM. This unique combination of services on a single platform makes the Cisco ASA 5510 an excellent choice for businesses requiring a cost-effective, extensible, DMZ-enabled security solution. As business needs grow, customers can install a Security Plus license, upgrading two of the Cisco ASA 5510 Adaptive Security Appliance interfaces to Gigabit Ethernet and enabling integration into switched network environments through VLAN support. This upgrade license maximizes business continuity by enabling Active/Active and Active/Standby high-availability services. Using the optional security context capabilities of the Cisco ASA 5510 Adaptive Security Appliance, businesses can deploy up to five virtual firewalls within an appliance to enable compartmentalized control of security policies on a departmental level. This virtualization strengthens security and reduces overall management and support costs while consolidating multiple security devices into a single appliance. Businesses can extend their SSL and IPsec VPN capacity to support a larger number of mobile workers, remote sites, and business partners. Businesses can scale up to 250 SSL VPN peers on each Cisco ASA 5510 by installing an SSL VPN upgrade license; 250 IPsec VPN peers are supported on the base platform. VPN capacity and resiliency can also be increased by taking advantage of the Cisco ASA 5510's integrated VPN clustering and load-balancing capabilities (available if a Security Plus license is installed). The Cisco ASA 5510 supports up to 10 appliances in a cluster, supporting a maximum of 2500 SSL VPN peers or 2500 IPsec VPN peers per cluster. Table 2 lists features of the Cisco ASA 5510. Table 2. Cisco ASA 5510 Adaptive Security Appliance Platform Capabilities and Capacities Feature Description Firewall Throughput Up to 300 Mbps Maximum Firewall and IPS Throughput • Up to 150 Mbps with AIP SSM-10 • Up to 300 Mbps with AIP SSM-20 VPN Throughput Up to 170 Mbps Concurrent Sessions 50,000; 130,000*** IPsec VPN Peers 250 SSL VPN Peer License Levels* 10, 25, 50, 100, or 250 Security Contexts Up to 5** Interfaces*** Five Fast Ethernet ports; 2 Gigabit Ethernet + 3 Fast Ethernet*** Virtual Interfaces (VLANs) 50; 100*** Scalability*** VPN clustering and load balancing High Availability Not supported; Active/Active, Active/Standby***