The below is a comparison of the PIX and the ASA. The ASA can handle up to
2500 SSL VPN connection and the VPN Concentrator can only handle 500
clientless.
PIX
PERFORMANCE SUMMARY
. Cleartext throughput: Up to 330 Mbps
. Concurrent connections: 280,000
. 168-bit 3DES IPSec VPN throughput: Up to 145 Mbps with VAC+ or 72 Mbps
with VAC
. 128-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+
. 256-bit AES IPSec VPN throughput: Up to 135 Mbps with VAC+
. Simultaneous VPN tunnels: 2000
ASA
Table 3. Cisco ASA 5540 Adaptive Security Appliance Platform Capabilities
and Capacities
Feature
Description
Firewall Throughput
Up to 650 Mbps
Concurrent Threat Mitigation Throughput (Firewall + IPS Services)
Up to 450 Mbps with AIP-SSM-20
VPN Throughput
Up to 325 Mbps
Concurrent Sessions
400,000
IPSec VPN Peers
5000
SSL VPN Peer License Levels*
10, 25, 50, 100, 250, 500, 750, 1000, and 2500
Security Contexts
Up to 50*
Interfaces
4 Gigabit Ethernet ports and 1 Fast Ethernet port
Virtual Interfaces (VLANs)
200
Scalability
VPN clustering and load balancing
High Availability
Active/Active, Active/Standby
_____
From: dabance [mailto:dabance@gmail.com]
Sent: Wednesday, February 15, 2006 3:20 AM
To: firewalls@securityfocus.com
Subject: PIX Vs ASA
Hi,
Recently i have seen the word ASA on cisco site and even CSPFA is replaced
by Securing Networks with PIX and ASA (SNPA). I believe that cisco has
introduced a new security platorm called ASA. Can anyone please explain me
what it is ??....whether this ASA 5500 series is going to replace the old
PIX Firewalls in future???...
Kindly throw some lights on the above mentioned....
regards,
Joesph
