Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Cisco broadens security family

Cisco launches new security appliances; beefs up IOS security.
By Phil Hochmuth , Network World , 07/17/2006

Cisco last week launched new versions of its multipurpose Adaptive Security Appliance, with small offices and large data centers in mind.

Cisco's ASA 5500 series appliance includes Cisco's VPN, firewall and other security technologies on a single hardware platform. New additions to the ASA family include the ASA 5505, which is targeted at small offices; the ASA 5550 is aimed at large sites that require more than 1Gbps of security traffic throughput.

The ASA 5550 can process traffic through its firewall processors at a maximum speed of 1.2Gbps - almost double the firewall performance on the previous high-end ASA 5540, released last year. The ASA 5550 can scan traffic on as many as 200 virtual LAN segments, and support as many as 5,000 IPsec and SSL VPN clients simultaneously.

"Initially, when Cisco launched the ASA, it was a midsize [product]," says Greg Young, research vice president with Gartner. "Now they're going in two directions. . . . They're answering the demand for the enterprise, and going after the smaller market."

The ASA 5505 is designed to sit on a desktop or in a small wiring closet, and supports as much as 150Mbps of firewall traffic throughput and 100Mbps of VPN traffic. The box has eight 10/100Mbps ports and two Power over Ethernet ports for powering wireless LAN access points or IP phones in a small office.

Both appliances support ASA Software 7.2, which was released with the new hardware. The software includes application firewall features, which lets an ASA device detect anomalies in, or misuses of certain application protocols, such as VoIP, instant messaging, and specific Microsoft network and application protocols.

Cisco also is adding its Network Admission Control (NAC) support to the Software 7.2 release. This lets an ASA device communicate with laptops, PCs or other endpoints running the Cisco Security Agent, and determine if the machines accessing the network have up-to-date security and operating system software. Cisco also built a Packet Tracer feature into the new software, which provides troubleshooting tools for analyzing how the device processes packets in order to fix configuration errors.

Gartner's Young says Cisco's attempt to broaden the ASA's scope could work well for some customers, but not all.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.

Whitepapers

Advancing the Economics of Networking

Aging network systems and old habits have dictated how businesses spend their IT budgets. As a...

Implementing HA at the Enterprise Data Center Edge to Connect to a Large Number of Branch Offices

This paper reviews the problem of creating a network where the dynamic availability of services is...

Enterprise Data Center Network Reference Architecture

Using a High Performance Network Backbone to Meet the Requirements of the Modern Enterprise Data...

Webcasts

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Stay out of the headlines: Detecting and preventing network intrusions

How do YOU stay out of the headlines? There is no denying that risk exists in our computer-driven...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

IP address management in 2008 - six things to know

Read this Network World Special Brief to learn how Enterprise IT managers must update their...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...