Threat control and containment services – All ASA models support basic IPS features.Identity-based security policies can be interleaved without restriction between traditional IP address-based rules. These services enhance the existing access control and security policy mechanisms by allowing users, or groups, to be specified in place of source IP addresses. Identity firewall – The ASA provides optional, granular access control based on an association of IP addresses to Windows Active Directory login information.Both platforms must be identical in software, licensing, memory, and interfaces, including the Security Services Module (SSM). High availability with failover – two identical ASAs can be paired into an active / standby failover configuration to provide device redundancy.Some features are not supported, including VPN and dynamic routing protocols. Many features are supported in multiple context modes, including routing tables, firewall features, IPS, and management. Multiple contexts are similar to having multiple standalone devices. Each context is an independent device, with its own security policy, interfaces, and administrators.

ASA virtualization – A single ASA can be partitioned into multiple virtual devices.Įach virtual device is called a security context.

Internet Edge of medium to large businesses ASA 5506-x/Security Plus, 750 Mbps throughput.

ASA 5505/security plus, 150Mbps throughput.

The choice of ASA model depends on an organization’s requirements, such as maximum throughput, maximum connections per second, and budget.

Cisco asa activation key command