Cisco ASA 5505 Adaptive Security Appliance W/ Power Supply "10 Hosts"

Description

Your small offices or branch locations require the best network security available. An integrated solution that is easy to deploy and manage improves IT efficiency. Affordable pricing and the ability to scale as necessary are other important product benefits. You get all that and more with the Cisco
®
ASA 5505 Adaptive Security Appliance Firewalls. These firewalls are used and trusted by small and midsize businesses with one or a few locations.
Enterprise class security. Cisco MultiScale
®
performance, The ability to deliver multiple security services at scale. Unprecedented services flexibility. Modular scalability. Feature extensibility. Lower deployment and operational costs. All of these features and benefits add up to tremendous value in the Cisco ASA 5505 Adaptive Security Appliance. Available models deliver the same proven level of security that protects the networks of some of the largest and most security-conscious companies in the world.
Product Overview
The Cisco ASA 5505 is a full-featured firewall for small business, branch, and enterprise teleworker environments. It delivers high-performance firewall, SSL and IPsec VPN, and rich networking services in a modular, immediately operational appliance. Using the integrated graphical Cisco Adaptive Security Device Manager (ASDM), the Cisco ASA 5505 can be rapidly deployed and easily managed, helping businesses reduce operational costs. It features a flexible 8-port 10/100 Fast Ethernet switch whose ports can be dynamically grouped to create up to three separate VLANs for home, business, and Internet traffic for improved network segmentation and security.
The Cisco ASA 5505 provides two Power over Ethernet (PoE) ports, simplifying the deployment of Cisco IP phones with highly secure zero-touch voice over IP (VoIP) capabilities and the deployment of external wireless access points for extended network mobility. A high-performance intrusion prevention and worm mitigation service is available with the addition of the Advanced Inspection and Prevention Security Services Card (AIP SSC). Multiple USB ports can be used to implement additional services and capabilities, as needed.
As your business needs grow, you can install a Security Plus upgrade license, The Cisco ASA 5505 can then scale to support a higher site to site VPN connection capacity of 25 IPsec VPN
connections
, add full DMZ support, and integrate into switched network environments through VLAN trunking support. This upgrade license improves business continuity by helping to enable support for redundant ISP connections and stateless active/standby high-availability services.
Businesses can also extend the Cisco ASA 5505’s VPN service by enabling the Cisco AnyConnect client and clientless VPN remote access to support various mobile workers and business partners. Cisco secure remote access solution deployments can scale to serve up to 25 Cisco AnyConnect or clientless VPN concurrent users on each Cisco ASA 5505. Licenses for AnyConnect are purchased separately from the ASA based on feature tier (Plus/Apex) unique/authorized user count and term. The Apex tier also supports clientless SSL VPN connectivity. Additional information can be found in the AnyConnect ordering guide.
This combination of market-leading security and VPN services, advanced networking features, flexible remote management capabilities, and future extensibility makes the Cisco ASA 5505 an excellent choice for businesses requiring a best-in-class small business, branch, or enterprise teleworker security solution.
Your small offices or branch locations require the best network security available. An integrated solution that is easy to deploy and manage improves IT efficiency. Affordable pricing and the ability to scale as necessary are other important product benefits. You get all that and more with the Cisco®ASA 5505 Adaptive Security Appliance Firewalls. These firewalls are used and trusted by small and midsize businesses with one or a few locations.
Enterprise class security. Cisco MultiScale®performance, The ability to deliver multiple security services at scale. Unprecedented services flexibility. Modular scalability. Feature extensibility. Lower deployment and operational costs. All of these features and benefits add up to tremendous value in the Cisco ASA 5505 Adaptive Security Appliance. Available models deliver the same proven level of security that protects the networks of some of the largest and most security-conscious companies in the world.
Product Overview
The Cisco ASA 5505 is a full-featured firewall for small business, branch, and enterprise teleworker environments. It delivers high-performance firewall, SSL and IPsec VPN, and rich networking services in a modular, immediately operational appliance. Using the integrated graphical Cisco Adaptive Security Device Manager (ASDM), the Cisco ASA 5505 can be rapidly deployed and easily managed, helping businesses reduce operational costs. It features a flexible 8-port 10/100 Fast Ethernet switch whose ports can be dynamically grouped to create up to three separate VLANs for home, business, and Internet traffic for improved network segmentation and security.
The Cisco ASA 5505 provides two Power over Ethernet (PoE) ports, simplifying the deployment of Cisco IP phones with highly secure zero-touch voice over IP (VoIP) capabilities and the deployment of external wireless access points for extended network mobility. A high-performance intrusion prevention and worm mitigation service is available with the addition of the Advanced Inspection and Prevention Security Services Card (AIP SSC). Multiple USB ports can be used to implement additional services and capabilities, as needed.
As your business needs grow, you can install a Security Plus upgrade license, The Cisco ASA 5505 can then scale to support a higher site to site VPN connection capacity of 25 IPsec VPN connections, add full DMZ support, and integrate into switched network environments through VLAN trunking support. This upgrade license improves business continuity by helping to enable support for redundant ISP connections and stateless active/standby high-availability services.
Businesses can also extend the Cisco ASA 5505’s VPN service by enabling the Cisco AnyConnect client and clientless VPN remote access to support various mobile workers and business partners. Cisco secure remote access solution deployments can scale to serve up to 25 Cisco AnyConnect or clientless VPN concurrent users on each Cisco ASA 5505. Licenses for AnyConnect are purchased separately from the ASA based on feature tier (Plus/Apex) unique/authorized user count and term. The Apex tier also supports clientless SSL VPN connectivity. Additional information can be found in the AnyConnect ordering guide. http://www.cisco.com/c/dam/en/us/products/security/anyconnect-og.pdf.
This combination of market-leading security and VPN services, advanced networking features, flexible remote management capabilities, and future extensibility makes the Cisco ASA 5505 an excellent choice for businesses requiring a best-in-class small business, branch, or enterprise teleworker security solution.
ciscoasa# show ver
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.2(1)
Compiled on Tue 05-May-09 22:45 by builders
System image file is "disk0:/asa821-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 1 min 6 secs
Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
Boot microcode   : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.04
0: Int: Internal-Data0/0    : address is 4055.398f.359f, irq 11
1: Ext: Ethernet0/0         : address is 4055.398f.3597, irq 255
2: Ext: Ethernet0/1         : address is 4055.398f.3598, irq 255
3: Ext: Ethernet0/2         : address is 4055.398f.3599, irq 255
4: Ext: Ethernet0/3         : address is 4055.398f.359a, irq 255
5: Ext: Ethernet0/4         : address is 4055.398f.359b, irq 255
6: Ext: Ethernet0/5         : address is 4055.398f.359c, irq 255
7: Ext: Ethernet0/6         : address is 4055.398f.359d, irq 255
8: Ext: Ethernet0/7         : address is 4055.398f.359e, irq 255
9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255
10: Int: Not used            : irq 255
11: Int: Not used            : irq 255
Licensed features for this platform:
Maximum Physical Interfaces  : 8
VLANs                        : 3, DMZ Restricted
Inside Hosts                 : 10
Failover                     : Disabled
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
SSL VPN Peers                : 2
Total VPN Peers              : 10
Dual ISPs                    : Disabled
VLAN Trunk Ports             : 0
Shared License               : Disabled
AnyConnect for Mobile        : Disabled
AnyConnect for Linksys phone : Disabled
AnyConnect Essentials        : Disabled
Advanced Endpoint Assessment : Disabled
UC Phone Proxy Sessions      : 2
Total UC Proxy Sessions      : 2
Botnet Traffic Filter        : Disabled
This platform has a Base license.
Serial Number: JMX151441C4
Running Activation Key: 0x5626c369 0xfcd1e1ba 0xb080bd7c 0xbbfc8000 0x8b101cb4
Configuration register is 0x1
Configuration has not been modified since last system restart.
ciscoasa# show run
: Saved
:
ASA Version 8.2(1)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 192.168.1.5-192.168.1.36 inside
dhcpd enable inside
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:df807821357e28953132722c408341a8
: end
ciscoasa#