Datasheet
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 15
Table 1 compares the features and capacities of the Cisco ASA 5500 and ASA 5500-X Series Next-Generation
Firewalls for small offices and branch locations.
Table 1. Cisco ASA 5500 and ASA 5500-X Series Next-Generation Firewalls for Small Offices and Branch Locations
Feature Cisco ASA 5505;
Security Plus
Cisco ASA 5510;
Security Plus
Cisco ASA 5512-X;
Security Plus
Cisco ASA 5515-X
Stateful Inspection
Throughput (Maximum
1
)
Up to 150 Mbps Up to 300 Mbps 1 Gbps 1.2 Gbps
Stateful Inspection
Throughput
(Multiprotocol
2
)
– – 500 Mbps 600 Mbps
IPS Throughput
3
Up to 75 Mbps with
AIP-SSC-5
Up to 150 Mbps with
AIP-SSM-10
Up to 300 Mbps with
AIP-SSM-20
250 Mbps
(Extra hardware not
required)
400 Mpbs
(Extra hardware not
required)
Next-Generation
Throughput
4
(Multiprotocol)
– – 200 Mbps 350 Mbps
3DES/AES VPN
Throughput
5
Up to 100 Mbps Up to 170 Mbps 200 Mbps 250 Mbps
Users/Nodes Unlimited Unlimited Unlimited Unlimited
IPsec VPN Peers 25
*
250 250 250
Cisco Cloud Web
Security Users
25 75 100 250
Premium AnyConnect
VPN Peers
(Included/Maximum)
2/25 2/250 2/250 2/250
Concurrent Connections
10,000; 25,000
*
50,000; 130,000
*
100,000 250,000
New Connections/
Second
4000 9000 10,000 15,000
Virtual Interfaces
(VLANs)
3 (trunking disabled)/
20 (trunking enabled)
*
50; 100 50; 100 100
Security Contexts
(Included/Maximum)
6
Not available 0,0;
2,5
0,0;
2,5
2,5
High Availability Not supported
*
Not supported;
Active/Active and
Active/Standby
**
Not supported;
Active/Active and
Active/Standby
**
Active/Active and
Active/Standby
Expansion Slot 1 SSC 1 SSM 1 interface card 1 interface card
User-Accessible Flash
Slot
– 1 No No
USB 2.0 Ports 3 (1 on front, 2 on rear) 2 2 2
Integrated I/O 8 Fast Ethernet with 2 PoE
ports
5 Fast Ethernet/2 GE
Copper, 3 Fast Ethernet
6 GE Copper 6 GE Copper
Expansion I/O – 4 GE Copper or 6 GE Copper or 6 GE Copper or
1
Maximum throughput measured with UDP traffic under ideal conditions.
2
Multiprotocol = Traffic profile consisting primarily of TCP-based protocols/applications like HTTP, SMTP, FTP, IMAPv4,
BitTorrent, and DNS.
3
Firewall traffic that does not go through the IPS service can have higher throughput.
4
Throughput was measured using ASA CX Software Release 9.1.1 with multiprotocol traffic profile with both AVC and WSE.
Traffic logging was enabled as well.
5
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should
be taken into consideration as part of your capacity planning.
6
Separately licensed feature; includes two SSL licenses with base system.