ASA-SSP-20-INC-RF

Double click on above image to view full picture

Zoom Out
Zoom In

ASA-SSP-20-INC-RF

Description:

Cisco Refurbished
Original Part No : ASA-SSP-20-INC

ASA5585-X Security Svcs Processor-20 with 8GE REMANUFACTURED
AED 0

Availability: In stock


Available Quantity: 70000

Delivery Time: 2 to 4 week

  • Add to Compare
  • Details

    Using a single firewall blade, the Cisco ASA 5585-X meets the growing needs of dynamic organizations by providing eight times the performance density, very high VPN session counts, twice as many connections per second, and four times the connection capacity of any competitive firewall.

    Firewall Features

    Support for Layer 3 and Layer 4 stateful firewall inspection features, including access control and network address translation, enables organizations to keep existing stateful inspection policies that are essential for compliance regulations. The context-aware Cisco Intrusion Prevention System (IPS) services provide the capability to act more intelligently and aggressively against threats that pose a significant risk to organizations.

    In addition to comprehensive stateful inspection capabilities, Layer 7 next-generation policies act intelligently on contextual information. Cisco AnyConnect® technology provides information on the type and location of a mobile device before it accesses the network, so that administrators can maintain high levels of network protection and control. Threat intelligence feeds from Cisco Collective Security Intelligence (CSI) use the global footprint of Cisco security deployments to analyze approximately one-third of the world’s Internet traffic for near-real-time protection from zero-day threats.

    Flexible Deployment Options

    The Cisco ASA 5585-X supports two hardware blades in a single 2RU chassis. The bottom slot (slot 0) hosts the ASA stateful inspection firewall module, while the top slot (slot 1) can be used for adding a dedicated Cisco IPS, Cisco ASA with FirePOWER Services, or a second stateful inspection firewall module. Multiple integrated security services within a single chassis provide broad deployment flexibility and investment protection. The ability to add a second stateful inspection firewall module doubles the firewall performance for superior scalability, performance density, and security for data center use cases. In addition, the top slot can optionally be populated with up to two Cisco ASA 5585-X I/O modules for high interface density for mission-critical data centers that require exceptional flexibility and security.

    Clustering

    Using Cisco ASA Software Release 9.0 and later, customers can combine up to 16 Cisco ASA 5585-X firewall modules in a single cluster for up to 640 Gbps of throughput, 2 million connections per second, and more than 100 million concurrent connections . This “pay as you grow” model enables organizations to purchase what they need today and dynamically add more when their performance needs grow. To protect high-performance data centers from internal and external threats, the cluster can be augmented by adding IPS modules.

    Cisco ASA software clustering delivers a consistent scaling factor, irrespective of the number of units in the cluster, for a linear and predictable increase in performance. Complexity is reduced, as no changes are required to existing Layer 2 and Layer 3 networks. Support for data center designs based on the Cisco Catalyst® 6500 Series Virtual Switching System (VSS) and the Cisco virtual PortChannel (vPC) as well as the Link Aggregation Control Protocol (LACP) provides high availability (HA) with better network integration.

    For operational efficiency, Cisco ASA clusters are easy to manage and troubleshoot. Policies pushed to the master node are replicated across all the units within the cluster. The health, performance, and capacity statistics of the entire cluster, as well as individual units within the cluster, can be assessed from a single management console. Hitless software upgrades are supported for ease of device updates.

    Clustering supports HA in both active/active and active/passive modes. All units in the cluster actively pass traffic, and all connection information is replicated to at least one other unit in the cluster to support N+1 HA. In addition, single and multiple contexts are supported, along with routed and transparent modes. A single configuration is maintained across all units in the cluster using automatic configuration sync. Clusterwide statistics are provided to track resource usage.

    Cisco TrustSec Integration

    Using Cisco ASA Software Release 9.0 and later, the Cisco ASA 5585-X provides context awareness through the integration of identity-based firewall security and Cisco TrustSec® security group tags for enhanced visibility and control. Identity-based firewall security provides more flexible access control to enforce policies based on user and group identities and the point of access. Administrators can write policies that correspond to business rules, a process that increases security, enhances ease of use, and requires fewer policies to manage. Similarly, Cisco TrustSec integration enables security group tags to be embedded into the network, providing administrators with the ability to develop and enforce better, more precise policies.

    Cut Costs While Improving Performance and Security

    The Cisco ASA 5585-X Next-Generation Firewall delivers superior scalability, performance, and security to handle high data volumes without sacrificing performance. Most firewalls require up to 16RUs and 5100 watts to scale to the level of performance that the Cisco ASA 5585-X achieves with only 2RUs and 785 watts. This performance helps enterprises meet the increasing demands for network connectivity without the need to invest in additional data center space and incur the corresponding maintenance costs.

    Based on tests conducted by Cisco, the Cisco ASA 5585-X significantly reduces initial procurement costs by 80 percent, power consumption costs by 85 percent, and rack space requirements by 88 percent in addition to significant reductions in overall integration and management complexity and costs. In addition, you can install up to two firewall modules in a single Cisco ASA 5585-X chassis, providing scalability to 80 Gbps.

    Table 1 gives the capabilities of the four Cisco ASA 5585-X models.

    Table 1.       Cisco ASA 5585-X Next-Generation Firewall Capabilities and Capacities

    Feature

    Cisco ASA 5585-X with SSP-10

    Cisco ASA 5585-X with SSP-20

    Cisco ASA 5585-X with SSP-40

    Cisco ASA 5585-X with SSP-60

     

    Typical use case

    Edge

    Edge

    Data center

    Data center

    Users or nodes

    Unlimited

    Unlimited

    Unlimited

    Unlimited

    Stateful inspection firewall throughput (maximum)[1]

    4 Gbps

    10 Gbps

    20 Gbps

    40 Gbps

    Stateful inspection firewall throughput (multiprotocol)[2]

    2 Gbps

    5 Gbps

    10 Gbps

    20 Gbps

    Concurrent firewall connections

    1,000,000

    2,000,000

    4,000,000

    10,000,000

    Firewall connections per second

    50,000

    125,000

    200,000

    350,000

    Packets (64 byte) per second

    1,500,000

    3,000,000

    5,000,000

    9,000,000

    Security contexts[3]

    Up to 100

    Up to 250

    Up to 250

    Up to 250

    Authentication

    Active Directory agent, LDAP, Kerberos, NTLM

    Active Directory agent, LDAP, Kerberos, NTLM

    Active Directory agent, LDAP, Kerberos, NTLM

    Active Directory agent, LDAP, Kerberos, NTLM

    Maximum 3DES/AES IPsec VPN throughput[4]

    1 Gbps

    2 Gbps

    3 Gbps

    5 Gbps

    Maximum Site-to-Site and IPsec IKEv1 client VPN Sessions4

    Up to 5,000

    Up to 10,000

    Up to 10,000

    Up to 10,000

    Maximum Cisco AnyConnect® or Clientless VPN User Sessions[5]

    Up to 5,000

    Up to 10,000

    Up to 10,000

    Up to 10,000

    Interfaces

    8-port 10/100/1000, 2-port 10 Gigabit Ethernet** (SFP+)

    8-port 10/100/1000, 2-port 10 Gigabit Ethernet** (SFP+)

    6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)

    6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)

    Maximum number of interfaces

    16-port 10/100/1000, 4-port 10 Gigabit Ethernet** (SFP+)(with 2 modules perchassis)

    16-port 10/100/1000, 4-port 10 Gigabit Ethernet** (SFP+)(with 2 modules perchassis)

    12-port 10/100/1000,8-port 10 Gigabit Ethernet (SFP+) (with 2 modules per chassis)

    12-port 10/100/1000, 8-port 10 Gigabit Ethernet (SFP+) (with 2 modules per chassis)

    Integrated network management ports

    2-port 10/100/1000

    2-port 10/100/1000

    2-port 10/100/1000

    2-port 10/100/1000

    Integrated network ports

    8-port 10/100/1000, 2-port 10 Gigabit Ethernet*** (SFP+)

    8-port 10/100/1000, 2-port 10 Gigabit Ethernet*** (SFP+)

    6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)

    6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)

    Maximum number of integrated network ports

    16-port 10/100/1000, 4-port 10 Gigabit Ethernet*** SFP+ (with 2 modules per chassis)

    16-port 10/100/1000, 4-port 10 Gigabit Ethernet*** SFP+ (with 2 modules per chassis)

    12-port 10/100/1000,8-port 10 Gigabit Ethernet SFP+(with 2 modules per chassis)

    12-port 10/100/1000, 8-port 10 Gigabit Ethernet SFP+ (with 2 modules per chassis)

    Interface card slots

    2

    2

    2

    2

    Virtual interfaces (VLANs)

    1024

    1024

    1024

    1024

    Scalability

    VPN clustering and load balancing

    VPN clustering and load balancing

    VPN clustering and load balancing

    VPN clustering and load balancing

    High availability

    Active/active[6] and Active/standby

    Active/active6 and Active/standby

    Active/active6 and Active/standby

    Active/active6 and Active/standby

    Redundant power

    Supported, second power supply optional

    Supported, second power supply optional

    Supported, second power supply optional

    Supported

    USB 2.0 ports

    2

    2

    2

    2

    Serial ports

    1 RJ-45, console and auxiliary

    1 RJ-45, console and auxiliary

    1 RJ-45, console and auxiliary

    1 RJ-45, console and auxiliary

    Rack mountable

    Yes, rack mounts included

    Yes, rack mounts included

    Yes, rack mounts included

    Yes, rack mounts included

    Memory

    6 GB (SSP-10) 12 GB (with 2 modules per chassis)

    12 GB (SSP-20) 24 GB (with 2 modules per chassis)

    12 GB (SSP-40) 36 GB (with 2 modules per chassis)

    24 GB (SSP-60) 72 GB (with 2 modules per chassis)

    Minimum system flash

    2 GB (SSP-10)
    4 GB (with 2 modules per chassis)

    2 GB (SSP-20)
    4 GB (with 2 modules per chassis)

    2 GB (SSP-40)
    4 GB (with 2 modules per chassis)

    2 GB (SSP-60)
    4 GB (with 2 modules per chassis)

    Operating temperature

    32 to 104°F
    (0 to 40°C)

    32 to 104°F
    (0 to 40°C)

    32 to 104°F
    (0 to 40°C)

    32 to 104°F
    (0 to 40°C)

    Relative humidity

    10 to 90 percent noncondensing

    10 to 90 percent noncondensing

    10 to 90 percent noncondensing

    10 to 90 percent noncondensing

    Altitude

    Designed and tested for 
    0 to 10,000 ft (3050 m)

    Designed and tested for 
    0 to 10,000 ft (3050 m)

    Designed and tested for 
    0 to 10,000 ft (3050 m)

    Designed and tested for 
    0 to 10,000 ft (3050 m)

    Noise

    65 dBa max

    65 dBa max

    65 dBa max

    65 dBa max

    Temperature

    -40 to +158°F
    (-40 to +70°C)

    -40 to +158°F
    (-40 to +70°C)

    -40 to +158°F
    (-40 to +70°C)

    -40 to +158°F
    (-40 to +70°C)

    Relative humidity

    5 to 95 percent noncondensing

    5 to 95 percent noncondensing

    5 to 95 percent noncondensing

    5 to 95 percent noncondensing

    Altitude

    0 to 30,000 ft (9144 m)

    0 to 30,000 ft (9144 m)

    0 to 30,000 ft (9144 m)

    0 to 30,000 ft (9144 m)

    Range line voltage

    100 to 240 VAC

    100 to 240 VAC

    100 to 240 VAC

    100 to 240 VAC

    Normal line voltage

    100 to 240 VAC

    100 to 240 VAC

    100 to 240 VAC

    100 to 240 VAC

    Maximum current

    9A (100 VAC),
    4.5A (200 VAC)

    9A (100 VAC),
    4.5A (200 VAC)

    9A (100 VAC),
    4.5A (200 VAC)

    9A (100 VAC),
    4.5A (200 VAC)

    Frequency

    50 to 60 Hz

    50 to 60 Hz

    50 to 60 Hz

    50 to 60 Hz

    Steady state

    320W (1 SSP only)
    670W (with 2 modules per chassis)

    320W (1 SSP only)
    670W (with 2 modules per chassis)

    320W (1 SSP only)
    670W (with 2 modules per chassis)

    320W (1 SSP only)
    670W (with 2 modules per chassis)

    Maximum peak

    370W (1 SSP only)
    770W (with 2 modules per chassis)

    370W (1 SSP only)
    770W (with 2 modules per chassis)

    370W (1 SSP only)
    770W (with 2 modules per chassis)

    370W (1 SSP only)
    770W (with 2 modules per chassis)

    Maximum heat dissipation

    3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)

    3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)

    3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)

    3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)

    Form factor

    2RU, 19-in. rack-mountable

    2RU, 19-in. rack-mountable

    2RU, 19-in. rack-mountable

    2RU, 19-in. rack-mountable

    Dimensions (H x W x D)

    3.47 x 19 x 26.5 in.
    (8.8x 48.3 x 67.3 cm)

    3.47 x 19 x 26.5 in. 
    (8.8x 48.3 x 67.3 cm)

    3.47 x 19 x 26.5 in. 
    (8.8x 48.3 x 67.3 cm)

    3.47 x 19 x 26.5 in. 
    (8.8x 48.3 x 67.3 cm)

    Weight

    50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg)with 2 modules per chassis and dual power supplies

    50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg)with 2 modules per chassis and dual power supplies

    50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg)with 2 modules per chassis and dual power supplies

    50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg)with 2 modules per chassis and dual power supplies

    Safety

    UL 60950-1, CAN/CSA-C22.2 No. 60950-1
    EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943

    UL 60950-1, CAN/CSA-C22.2 No. 60950-1
    EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943

    UL 60950-1, CAN/CSA-C22.2 No. 60950-1
    EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943

    UL 60950-1, CAN/CSA-C22.2 No. 60950-1
    EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943

    Electromagnetic compatibility (EMC)

    47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series

    47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series

    47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series

    47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series

    Note:    Performance numbers were tested and validated with Cisco ASA Software Release 8.4.

    Additional Information

    SKU ASA-SSP-20-INC-RF
    Weight (Kg) 1
    Datasheet URL http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-730903.html
    Condition Refresh
    Module Type Security Services Processor

    ASA-SSP-20-INC-RF

    AED

    AED 0

    0