Cisco® ASA 5500 Series adaptive security appliances are purpose-built solutions that combine best-of-breed security and VPN services with the innovative Cisco Adaptive Identification and Mitigation (AIM) architecture. Designed as a key component of the Cisco Self-Defending Network, the Cisco ASA 5500 Series provides proactive threat defense that stops attacks before they spread through the network, controls network activity and application traffic, and delivers flexible VPN connectivity. The result is a powerful multifunction network security appliance family that provides the security breadth and depth for protecting small and medium-sized business and enterprise networks while reducing the overall deployment and operations costs and complexities associated with providing this new level of security.

Base Models

• ASA5505
• ASA5510
• ASA5520
• ASA5540
• ASA5550

Security Services Modules

• ASA-SSM-AIP-10-K9
• ASA-SSM-AIP-20-K9
• ASA-SSM-CSC-10-K9

Gigabit Ethernet Module

• SSM-4GE

ASA 5505

1. Power 48VDC
2. SSC Slot
3. Network interface LEDs
4. Network interface*
5. Console port
6. USB 2.0 Interface
7. Reset button
8. Lock slot

*Ports 6 and 7 are PoE ports, used for devices that can be powered by the network interface, IP phones for example. They can also be used as regular Ethernet switch ports, just like the ports numbered 0 through 5.

Features	Description
Concurrent Sessions	10,000; 25,000*
IPSec VPN Peers	10,25*
SSL VPN Session peer license levels**	25
Security Contexts	None
Interfaces	8 port 10/100 switch with 2 Power Over Ethernet Ports
Virtual Interfaces (VLANs)	3 Restricted DMZ/ 3 Full DMZ*
High Availability	Not Supported, Stateless A/S*
Firewall Throughput	Up to 150 Mbps
Concurrent Threat Mitigation Throughput (Firewall + Anti-x Services)	Not Available
VPN Throughput	100Mbps

* Upgrade available with Cisco ASA 5505 Security Plus license

**Separately licensed feature; includes two with the base system

Return to Top

ASA 5510

	LED	Color	State	Description
1	Power	Green	On	The system has power.
2	Status	Green	Flashing	The power-up diagnostics are running or the system is booting.
			Solid	The system has passed power-up diagnostics.
		Amber	Solid	The power-up diagnostics have failed.
3	Active	Green	Flashing	There is network activity.
4	VPN	Green	Solid	VPN tunnel is established.
5	Flash	Green	Solid	The CompactFlash is being accessed.

1. Management Port*
2. External CompactFlash slot
3. Serial Console port
4. Power switch
5. Power indicator LED
6. USB 2.0 interfaces**
7. Network interfaces^***
8. Power indicator LED
9. Status indicator LED
10. Active LED
11. VPN LED
12. Flash LED
13. AUX port
14. Power connector

*     The management 0/0 interface is a Fast Ethernet interface designed for management traffic.

**     Not supported at this time.

***     10/100/1000 Gigabit Ports on ASA 5520

Features	Description
Concurrent Sessions	50,000; 130,000*
IPSec VPN Peers	250***
Maximum SSL VPN Session	250
Security Contexts	Up to 5****
Interfaces	3 Fast Ethernet + 1 management port; 5 Fast Ethernet ports*
Virtual Interfaces (VLANs)	10 / 25*
High Availability	Not Supported, Active/Active, Active/Standby*
Firewall Throughput	Up to 300 Mbps
Maximum User for CSC-SSM	500 (CSC-SSM-10) 1000 (CSC-SSM-20)
Maximum users for CSC module	500 (CSC-SSM-10) 1000 (CSC-SSM-20)
Concurrent Threat Mitigation Throughput (Firewall + Anti-x Services)	150 Mbps with AIP-SSM-10 300 Mbps with AIP-SSM-20
High Availability	Active/Active, Active/Standby
Concurrent Threat Mitigation Throughput (Firewall + Anti-x Services)	150 Mbps with AIP-SSM-10 300 Mbps with AIP-SSM-20
VPN Throughput	170Mbps

* Upgrade available with Cisco ASA 5510 Security Plus license

** Separately licensed feature; includes two with the base system .

*** Supported from ASA Software Version 7.1

**** Separately licensed feature, includes two with the Cisco Security Plus License

Return to Top

ASA 5520

	LED	Color	State	Description
1	Power	Green	On	The system has power.
2	Status	Green	Flashing	The power-up diagnostics are running or the system is booting.
			Solid	The system has passed power-up diagnostics.
		Amber	Solid	The power-up diagnostics have failed.
3	Active	Green	Flashing	There is network activity.
4	VPN	Green	Solid	VPN tunnel is established.
5	Flash	Green	Solid	The CompactFlash is being accessed.

1. Management Port*
2. External CompactFlash slot
3. Serial Console port
4. Power switch
5. Power indicator LED
6. USB 2.0 interfaces**
7. Network interfaces^***
8. Power indicator LED
9. Status indicator LED
10. Active LED
11. VPN LED
12. Flash LED
13. AUX port
14. Power connector

*     The management 0/0 interface is a Fast Ethernet interface designed for management traffic.

**     Not supported at this time.

***      10/100/1000 Gigabit Ports on ASA 5520

Features	Description
Firewall Throughput	Up to 450 Mbps
Concurrent Threat Mitigation Throughput (Firewall + Anti-x Services)	Up to 225 Mbps with AIP-SSM-10Up to 375 Mbps with AIP-SSM-20
VPN Throughput	Up to 225 Mbps
Concurrent Sessions	280,000
IPSec VPN Peers	750
Maximum SSL VPN session	750
Security Contexts	Up to 20*
Interfaces	4 Gigabit Ethernet ports and 1 Fast Ethernet port
Virtual Interfaces (VLANs)	100
Maximum users for CSC module	500 (CSC-SSM-10) 1000 (CSC-SSM-20)
Scalability	VPN clustering and load balancing
High Availability	Active/Active, Active/Standby

*Separately licenced features, includes two in the base system

Return to Top

ASA 5540

	LED	Color	State	Description
1	Power	Green	On	The system has power.
2	Status	Green	Flashing	The power-up diagnostics are running or the system is booting.
			Solid	The system has passed power-up diagnostics.
		Amber	Solid	The power-up diagnostics have failed.
3	Active	Green	Flashing	There is network activity.
4	VPN	Green	Solid	VPN tunnel is established.
5	Flash	Green	Solid	The CompactFlash is being accessed.

1. Management Port*
2. External CompactFlash slot
3. Serial Console port
4. Power switch
5. Power indicator LED
6. USB 2.0 interfaces**
7. Network interfaces^***
8. Power indicator LED
9. Status indicator LED
10. Active LED
11. VPN LED
12. Flash LED
13. AUX port
14. Power connector

*      The management 0/0 interface is a Fast Ethernet interface designed for management traffic.

**     Not supported at this time.

***     10/100/1000 Gigabit Ports on ASA 5540

Features	Description
Firewall Throughput	Up to 650 Mbps
Concurrent Threat Mitigation Throughput (Firewall + Anti-x Services)	Up to 450 Mbps with AIP-SSM-20
VPN Throughput	Up to 325 Mbps
Concurrent Sessions	280,000
IPSec VPN Peers	5000
Maximum SSL VPN session	2500
Security Contexts	Up to 50*
Interfaces	4 Gigabit Ethernet ports and 1 Fast Ethernet port
Virtual Interfaces (VLANs)	200
Scalability	VPN clustering and load balancing
High Availability	Active/Active, Active/Standby

*Separately licenced features, includes two in the base system

Return to Top

ASA 5550

Features	Description
Firewall Throughput	Up to 1.2 Gbps
VPN Throughput	425 Mbps
Concurrent Sessions	650,000
IPSec VPN Peers	5000
SSL VPN peer license levels*	10,25,50,100,250,500,750,1000,2500, and 5000
Maximum SSL VPN session	5000
Security Contexts	Up to 50*
Interfaces**	8 Gigabit Ethernet ports and 1 Fast Ethernet port
Virtual Interfaces (VLANs)	200
High Availability	Active/Active, Active/Standby
Scalability	VPN clustering and load balancing

*Separately licenced features, includes two in the base system

** * Note: The system provides a total of 12 Gigabit Ethernet ports, of which only 8 can be in service at any time.

1. RJ-45 ports 1
2. RJ-45 Link LED
3. RJ-45 Speed LED
4. Power LED
5. Status LED
6. SFP ports 5
7. SFP Link LED
8. SFP Speed LED
9. USB 2.0 interfaces 2
10. Management port 3
11. Network interfaces 4
12. Power indicator LED
13. Status indicator LED
14. Active LED
15. VPN LED
16. Flash LED
17. AUX port
18. External CompactFlast slot
19. Serial Console port
20. Power switch
21. Power indicator LED

1 GigabitEthernet ports, from right to left, GigabitEthernet 0/0, GigabitEthernet 1/0, GigabitEthernet 1/2, and GigabitEthernet 1/3

2 Not supported at this time.

3The management 0/0 interface is a Fast Ethernet interface designed for management traffic only.

4 GigabitEthernet interfaces, from right to left, GigabitEthernet 0/0, GigabitEthernet 0/1, GigabitEthernet 0/2, and GigabitEthernet 0/3.

5 SFP ports, from right to left, GigabitEthernet 0/0, GigabitEthernet 1/0, GigabitEthernet 1/2, and GigabitEthernet 1/3

Return to Top

Cisco ASA 5500 Series 4GE SSM

Features	Description
Integrated Ports	Four 10/100/1000BASE-T
Integrated SFP	Four (Gigabit Ethernet Optical SFP 1000BASE-SX or LX/LH transceiver supported)

* The 4GE SSM has four 10/100/1000 Mbps, copper, RJ-45 ports and four optional 1000 Mbps, Small-Form-Factor Pluggable (SFP) fiber ports.

Return to Top

ASA-SSM-AIP-10-K9 / ASA-SSM-AIP-20-K9

	LED	Color	State	Description
1	POWER	Green	On	The system has power.
2	STATUS	Green	Flashing	The system is booting.
			Solid	The system has passed power-up diagnostics.
3	LINK/ACT	Green	Solid	There is Ethernet link.
			Flashing	There is Ethernet activity.
4	SPEED	Green	100MB	There is network activity.
		Amber	1000 MB (GigabitEthernet)	There is network activity.

	SSM-AIP-10	SSM-AIP-20
Concurrent Threat Mitigation Throughput (Firewall + Anti-x services)	150 Mbps with Cisco ASA 5510	375 Mbps with Cisco ASA 5520
	225 Mbps with Cisco 5520	450 Mbps with Cisco ASA 5540
Memory	1 GB	2 GB
Flash	256 MB	256 MB

Return to Top

ASA-SSM-CSC-10-K9 / ASA-SSM-CSC-20-K9

CSC-SSM Hardware	Standard Licenses	Optional Licenses	Description
		User Upgrades (Total Users)	Feature Upgrades
CSC-SSM-10	50 Users Antivirus, anti-spyware, file blocking	100 Users 250 Users 500 Users	Plus license-Adds anti-spam, anti-phishing, URL blocking/filtering and content control
CSC-SSM-20	500 Users Antivirus, anti-spyware, file blocking	750 Users 1000 Users	Plus license-Adds anti-spam, anti-phishing, URL blocking/filtering and content control

Supported Platforms

Hardware	Appliances Supported
CSC-SSM-10	Cisco ASA 5510 Adaptive Security Appliance Cisco ASA 5520 Adaptive Security Appliance
CSC-SSM-20	Cisco ASA 5510 Adaptive Security Appliance Cisco ASA 5520 Adaptive Security Appliance Cisco ASA 5540 Adaptive Security Appliance

Hardware	Software Versions Supported
Cisco ASA 5500 Series Appliances	Cisco ASA Software Version 7.1(1) and higher
Cisco Adaptive Security Device Manager	Cisco ASDM Software Version 5.1(1) and higher
Cisco CSC-SSM	Cisco CSC Software Version 6.0(b1349) and higher

* The Cisco ASA 5500 Series CSC-SSM ships with a default feature set that provides antivirus, anti-spyware, and file blocking services. A premium Plus license is available for additional capabilities including anti-spam, Anti-Phishing , URL blocking/filtering and content control services. The optional Plus pack feature license is available for an additional charge for each CSC-SSM.

Return to Top