ASA Adaptive Security Appliance Licensing

This topic explains the licensing options for the Cisco ASA 5500 Series Adaptive Security Appliances. Cisco ASA Security Appliance licensing is a feature-based license key system. The Cisco ASA Security Appliance license determines the number of contexts, the type of VPN encryption, and the number of VPN peers that an ASA Security Appliance can support.

Default

• Two contexts Available Context Licenses

• Five contexts

• Ten contexts

• 20 contexts

• 50 contexts Upgrade Licenses

• From Five to Ten contexts

• From Ten to 20 contexts

• From 20 to 50 contexts

Default

• Two contexts Available Context Licenses

• Five contexts

• Ten contexts

• 20 contexts

• 50 contexts Upgrade Licenses

• From Five to Ten contexts

• From Ten to 20 contexts

• From 20 to 50 contexts

© 2005 Cisco Systems, Ii

The figure shows the licensing that is available for the Cisco ASA 5500 Series Security Appliances. You can partition a single ASA Security Appliance into multiple virtual firewalls, known as security contexts. Each context is an independent firewall, with its own security policy, interfaces, and administrators. By default, the ASA 5520 and 5540 Security Appliances support two contexts. You may purchase an initial context license for a predetermined number of contexts. As your network grows or your requirements change, you may also purchase an upgrade context license to increase the number of available contexts. The number of contexts available in an ASA Security Appliance is dependent upon the model and the context license. An ASA 5520 Security Appliance supports up to ten contexts, and an ASA 5540 Security Appliance supports up to 50 contexts.

Licenses

Interfaces

Security Contexts

VLANs

IPSec VPN Peers

Failover A/S A/A

GPRS GTP

ASA 5510

Base

3 x 10/100

N/A

0

50

N/A

N/A

N/A

Security+

5 x 10/100

N/A

10

150

Yes

N/A

N/A

ASA 5520

Base

4 x 10/100/1000, 1 10/100

Default 2; up to 10

25

300

Yes

Yes

License

VPN+

4 x 10/100/1000, 1 10/100

Default 2; up to 10

25

750

Yes

Yes

License

ASA 5540

Base

4 x 10/100/1000, 1 10/100

Default 2; up to 50

100

500

Yes

Yes

License

VPN+

4 x 10/100/1000, 1 10/100

Default 2; up to 50

100

2000

Yes

Yes

License

VPN Premium

4 x 10/100/1000, 1 10/100

Default 2; up to 50

100

5000

Yes

Yes

License

© 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—2-43

© 2005 Cisco Systems, Inc. All rights reserved. SNPA v4.0—2-43

The table in the figure compares the licenses offered for the Cisco ASA 5510 Adaptive Security Appliance, the ASA 5520 Security Appliance, and the ASA 5540 Security Appliance. For each license type and security appliance model, the table provides the maximum number of physical interfaces, the maximum number of security contexts, the maximum number of VLANS, the maximum number of IPSec VPN peers, failover capabilities, and General Packet Radio System (GPRS) Tunneling Protocol (GTP).

Continue reading here: Viewing and Saving Your Configuration

Was this article helpful?

0 0