Cisco PIX 500 Series Security Appliances Hardware acceleration
• Cisco IPsec VPN SPA
Here are more details on the Cisco VPN product family:
■ Cisco VPN-enabled routers and switches: Cisco VPN security routers and switches represent the best options for customers of all sizes looking to take advantage of their existing network infrastructures to deploy VPNs and security while integrating all services in a single device with the widest selection of WAN and LAN interfaces.
■ Cisco VPN 3000 Series Concentrators: Cisco VPN 3000 Series Concentrators are the most feature-rich remote-access VPN platform from Cisco, offering solutions for the most diverse remote-access deployment scenarios. Cisco VPN 3000 Series Concentrators offers both IPsec and SSL VPN connectivity on a single platform without the expense of individual feature licensing. Customers can achieve significant cost savings while experiencing the advanced features required by contemporary remote-access VPN deployments.
■ Cisco ASA 5500 Series Adaptive Security Appliances: The Cisco ASA 5500 Series Adaptive Security Appliances are all-in-one security appliances that deliver enterprise-class security and IPsec VPN to small and medium-sized businesses and large enterprise networks in a modular, purpose-built appliance. Cisco ASA 5500 Series Adaptive Security Appliances incorporate a wide range of integrated security services, including firewall, intrusion prevention system (IPS), and VPN in an easy-to-deploy, high-performance solution. By integrating VPN and security services, the Cisco ASA 5500 Series Adaptive Security Appliances provide secure VPN connectivity and communications.
6-92 Securing Cisco Network Devices (SND) v2.0 © 2006 Cisco Systems, Inc.
■ Cisco PIX 500 Series Security Appliances: Cisco PIX 500 Series Security Appliances provide robust, enterprise-class, integrated network security services, including stateful inspection firewall, deep protocol and application inspection, IPsec VPN, multivector attack protection, and rich multimedia and voice security. Cisco PIX 500 Series Security Appliances are ideal for clients looking for the best-of-breed firewall combined with comprehensive VPN support. Cisco PIX 500 Series Security Appliances are also an excellent option for organizations whose security policies recommend separate management of the security infrastructure, setting a clear demarcation between security and network operation.
To enhance the performance and offload the encryption task to specialized hardware, the Cisco
VPN family of devices offers hardware acceleration modules.
■ Advanced integration module (AIM): A broad range of Cisco routers can be equipped with AIM. The AIM modules are installed inside the router chassis and offload encryption tasks from the router CPU.
■ Cisco IPsec VPN Shared Port Adapter (Cisco IPsec VPN SPA): The Cisco IPsec VPN SPA delivers scalable and cost-effective VPN performance for Cisco Catalyst 6500 Series switches and Cisco 7600 Series Routers. Using the Cisco 7600 Series/Catalyst 6500 Series Services SPA Carrier-400 (Cisco Services SPA Carrier-400), each slot of the Cisco Catalyst 6500 switch or Cisco 7600 Series Router can support up to two Cisco IPsec VPN SPAs.
■ Scalable Encryption Processing (SEP): Cisco VPN 3000 Series Concentrators can be upgraded with Enhanced Scalable Encryption Processing (SEP-E) modules. The modules perform hardware encryption of Data Encryption Standard (DES) 0, Triple-Data Encryption Standard (3DES), and Advanced Encryption Standard (AES) traffic.
■ Cisco PIX Security appliance VPN Accelerator Card+ (VAC+): The VAC+ delivers hardware acceleration up to 425 Mbps of DES, 3DES, or AES IPsec encryption throughput.
© 2006 Cisco Systems, Inc. Building IPsec VPNs 6-93
Continue reading here: Cisco ASA 5500 Series Adaptive Security Appliance Platforms
Was this article helpful?