License Options - Cisco PIX 525 Datasheet

All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Feature Benefit
● Provides "touchless" secure remote management of Cisco PIX Security Appliance
Auto Update
configuration and software images via a unique "push/pull" management model
● Next-generation secure Extensible Markup Language (XML) over HTTPS management
interface can be used by Cisco and third-party management applications for remote Cisco PIX
Security Appliance configuration management, inventory, software image
management/deployment and monitoring
● Integrates with CiscoWorks Management Center for Firewalls and Auto Update Server for
robust, scalable remote management of up to 1000 Cisco PIX Security Appliances (per
management server)
● Allows customers to use existing Cisco IOS Software CLI knowledge for easy installation and
Cisco PIX Command Line
Interface (CLI) management without additional training
● Supports improved ease-of-use with services such as command completion, context-sensitive
help, and command aliasing
● Accessible through variety of methods including console port, Telnet, and SSHv2
● Gives businesses the ability to create up to 16 customizable administrative roles/profiles for
Command-Level
Authorization managing a Cisco PIX Security Appliance (monitoring only, read-only access to configuration,
VPN administrator, firewall/NAT administrator, etc.)
● Uses either the internal administrator database or outside sources via TACACS+, such as
Cisco Secure ACS
● Provides remote monitoring and logging capabilities, with integration into Cisco and third-party
SNMP and Syslog Support
management applications
● Supports Cisco IPSec Flow Monitoring SNMP MIB, providing a wealth of VPN flow statistics
including tunnel uptime, bytes/packets transferred, and more

License Options

The Cisco PIX 525 Security Appliance is available in four primary models that provide different
levels of interface density, failover capabilities, and VPN throughput. Optional licenses support
enabling features including security contexts, GTP inspection, and various strengths of encryption
technology.
Platform Licenses
Restricted Software License
The Cisco PIX 525 Restricted (PIX 525-R) model provides an excellent value for organizations
looking for robust Cisco PIX Security Appliance services with Gigabit Ethernet support, medium
interface density and moderate VPN throughput requirements. It includes 128 MB of RAM, two
10/100 Fast Ethernet interfaces, and support for up to four additional 10/100 Fast Ethernet or three
Gigabit Ethernet interfaces.
Unrestricted Software License
The Cisco PIX 525 Unrestricted (PIX 525-UR) model extends the capabilities of the security
appliance with support for stateful failover, additional LAN interfaces, and increased VPN
throughput via integrated hardware-based VPN acceleration. It includes an integrated VAC or
VAC+ hardware VPN accelerator, 256 MB of RAM, two 10/100 Fast Ethernet interfaces, and
support for up to eight additional 10/100 Fast Ethernet or three Gigabit Ethernet interfaces. The
Cisco PIX 525-UR also adds the ability to share state information with a secondary Cisco PIX
Security Appliance (either in an Active/Active or Active/Standby deployment model) for resilient
network protection.
Failover Active/Standby Software License
The Cisco PIX 525 Failover (PIX 525-FO) model is designed for use in conjunction with a PIX 525-
UR, providing a cost-effective, Active/Standby high-availability solution. It operates in hot-standby
mode acting as a complete redundant system that maintains current session state information.
Data Sheet
Page 8 of 13