A P P E N D I X A Feature Licenses And Specifications - Cisco FirePOWER ASA 5500 series Configuration Manual

Supported Platforms and Feature Licenses
Table A-1 ASA 5505 Adaptive Security Appliance License Features
ASA 5505
1
Users, concurrent
Security Contexts
2
VPN Sessions
Max. IPSec Sessions
Max. WebVPN
Sessions
VPN Load Balancing
Failover
GTP/GPRS
Maximum VLANs/Zones
Concurrent Firewall Conns
Max. Physical Interfaces
Encryption
Minimum RAM
1. In routed mode, hosts on the inside (Business and Home VLANs) count towards the limit only when they communicate with the outside (Internet VLAN).
Internet hosts are not counted towards the limit. Hosts that initiate traffic between Business and Home are also not counted towards the limit. The interface
associated with the default route is considered to be the Internet interface. If there is no default route, hosts on all interfaces are counted toward the limit.
In transparent mode, the interface with the lowest number of hosts is counted towards the host limit. See the show local-host command to view the host
limits.
2. Although the maximum IPSec and WebVPN sessions add up to more than the maximum VPN sessions, the combined sessions should not exceed the VPN
session limit. If you exceed the maximum VPN sessions, you can overload the security appliance, so be sure to size your network appropriately.
3. The concurrent firewall connections are based on a traffic mix of 80% TCP and 20% UDP, with one host and one dynamic translation for every four
connections.
Cisco Security Appliance Command Line Configuration Guide
A-2
Base License
10 Optional Licenses:
50 Unlimited
No support
10 combined IPSec and WebVPN
10
2 Optional License: 10
No support
None
No support
3 (2 regular zones and 1 restricted zone that
can only communicate with 1 other zone)
3
10 K
Unlimited, assigned to VLANs/zones
Base (DES) Optional license:
Strong (3DES/AES)
256 MB
Appendix A Feature Licenses and Specifications
Security Plus
10 Optional Licenses:
50 Unlimited
No support
25 combined IPSec and WebVPN
25
2 Optional License: 10
No support
Active/Standby (no stateful failover)
No support
5 (3 zones, 1 failover link, and 1 backup ISP
link)
25 K
Unlimited, assigned to VLANs/zones
Base (DES) Optional license:
Strong (3DES/AES)
256 MB
OL-10088-01