About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X
The Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X adaptive security appliances are part of the ASA 5500-X of next-generation mid-range ASAs and are built on the same security platform as the rest of the ASA family.
Note |
Your ASA 5506-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device. |
This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper web inspection and flow-specific analysis, improved secure connectivity via end-point security posture validation, and voice and video over VPN support. It also provides enhanced support for intelligent information networks through improved network integration, resiliency, and scalability.
This ASA is a smaller form-factor chassis, intended primarily for desktop or wall-mounting, although one or two can be mounted in a single rack shelf. The ASA has a standard 1 RU chassis. See Cisco ASA 5500-X Series Next-Generation Firewalls to compare the performance metrics and capabilities of the 5500-X ASAs.
Note |
Do not stack the ASA chassis on top of another ASA chassis. If you stack the units, they will overheat, which causes the units to power cycle. |
The ASA 5506-X, 5506W-X, and ASA 5506H-X have been validated for the following security standards certifications:
-
Federal Information Processing Standards (FIPS) 140-2 for ASA 9.12.x
-
Common Criteria (CC) certification for the Network Device Collaborative Protection Profile, (NDcPPv2.1), VPN Gateway Module (VPNGW_MOD_v1.0), and Firewall Module (FW_MOD_v1.3) for ASA 9.12.x
-
Common Criteria (CC) certification for the Network Device Collaborative Protection Profile, (NDcPPv2.2E), the IPS Extended Profile (IPSEP 2.11), Firewall Collaborative Protection Profile Module (MOD_FW_v1.4e), and Virtual Private Network Gateway Protection Profile Module (MOD_VPNGW_v1.1) for FTD 6.4.x
- ASA 5506W-X Wireless Features
-
The ASA 5506W-X supports two high-performing spatial stream rates over a deployable distance with high reliability when serving clients. The ASA 5506W-X contains two simultaneous dual-band radios (2.4-GHz and 5-GHz 802.11n MIMO radios) in a controller-based mode or autonomous mode. It has integrated internal antennas that support full interoperability with leading 802.11n clients. The radio hardware supports Unified, FlexConnect, and Monitor-mode.
The ASA 5506W-X has the following processor features:
-
128 MB NAND flash size
-
1 MB NOR flash size
-
128 MB DDR2 memory bus, x32
The 2.4 GHz and 5 GHz 802.11n radios have the following features:
-
802.11n standard compliant
-
A-MPDU TX
-
HT Duplicate Mode
-
2TX x 2RX
-
2-spatial streams, 300 Mbps PHY rate
-
Maximal ratio combining (MRC)
-
Cyclic Shift Diversity (CSD)
-
MCS0-MCS15; Short or Long Guard Intervals
-
DFS for UNII-2 and UNII-2 Extended channels, including 0.5us radar pulse detection
The ASA 5506W-X is configured with four single-band, inverted-F antennas (two 2.4-GHz and two 5-GHz), which are evenly spaced inside the top of the chassis. Peak gains are approximately 3 dBi in the 2.4-GHz band and 5 dBi in the 5-GHz band.
-
- ASA 5506H-X Features
-
The ASA 5506H-X is a hardened version of the 5506-X with a ruggedized chassis, power supply, SSD, and four ports instead of eight. It is ruggedized because it supports a much wider industrial operational temperature range (-20C to 60C), meets the harsh EMI and environmental criteria for the IEC1613 and IEC 61850-3 power substation standards, and meets IEC60529 IP40 for ingress protection.
The ASA 5506H-X ships with a ruggedized 5V-5.3V barrel power supply that provides 22 W. Or you can order an optional DC power supply that supplies 24V DC (part number PWR2-20W-24VDC) or 20W 20-60V DC (part number PWR2-22W-20-60VDC).
Note |
Before beginning any of the procedures described in this book, be sure to read the Regulatory and Compliance Safety Information for the Cisco ASA 5506-X series and follow proper safety procedures. |