Datasheet
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 15
Table 1 compares the features and capacities of the Cisco ASA 5500 and ASA 5500-X Series Next-Generation
Firewalls for small offices and branch locations.
Table 1. Cisco ASA 5500 and ASA 5500-X Series Next-Generation Firewalls for Small Offices and Branch Locations
Feature
Cisco ASA 5505;
Security Plus
Cisco ASA 5510;
Security Plus
Cisco ASA 5512-X;
Security Plus
Cisco ASA 5515-X
Stateful Inspection
Throughput
(Maximum
1
)
Up to 150 Mbps
Up to 300 Mbps
1 Gbps
1.2 Gbps
Stateful Inspection
Throughput
(Multiprotocol
2
)
–
–
500 Mbps
600 Mbps
IPS Throughput
3
Up to 75 Mbps with
AIP-SSC-5
Up to 150 Mbps with
AIP-SSM-10
Up to 300 Mbps with
AIP-SSM-20
250 Mbps
(Extra hardware not required)
400 Mpbs
(Extra hardware not
required)
Next-Generation
Throughput
4
(Multiprotocol)
–
–
200 Mbps
350 Mbps
3DES/AES VPN
Throughput
5
Up to 100 Mbps
Up to 170 Mbps
200 Mbps
250 Mbps
Users/Nodes
Unlimited
Unlimited
Unlimited
Unlimited
IPsec VPN Peers
25
*
250
250
250
Cisco Cloud Web
Security Users
25
75
100
250
Premium AnyConnect
VPN Peers
(Included/Maximum)
2/25
2/250
2/250
2/250
Concurrent
Connections
10,000; 25,000
*
50,000; 130,000
*
100,000
250,000
New Connections/
Second
4000
9000
10,000
15,000
Virtual Interfaces
(VLANs)
3 (trunking disabled)/
20 (trunking enabled)
*
50; 100
50; 100
100
Security Contexts
(Included/Maximum)
6
Not available
0,0;
2,5
0,0;
2,5
2,5
High Availability
Not supported
*
Not supported; Active/Active
and Active/Standby
**
Not supported; Active/Active
and Active/Standby
**
Active/Active and
Active/Standby
Expansion Slot
1 SSC
1 SSM
1 interface card
1 interface card
User-Accessible Flash
Slot
–
1
No
No
USB 2.0 Ports
3 (1 on front, 2 on rear)
2
2
2
Integrated I/O
8 Fast Ethernet with 2 PoE
ports
5 Fast Ethernet/2 GE
Copper, 3 Fast Ethernet
6 GE Copper
6 GE Copper
1
Maximum throughput measured with UDP traffic under ideal conditions.
2
Multiprotocol = Traffic profile consisting primarily of TCP-based protocols/applications like HTTP, SMTP, FTP, IMAPv4,
BitTorrent, and DNS.
3
Firewall traffic that does not go through the IPS service can have higher throughput.
4
Throughput was measured using ASA CX Software Release 9.1.1 with multiprotocol traffic profile with both AVC and WSE.
Traffic logging was enabled as well.
5
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should
be taken into consideration as part of your capacity planning.
6
Separately licensed feature; includes two SSL licenses with base system.