Guest

Hierarchical Navigation

Support

Feature Matrix

Downloads

Table Of Contents


The following tables list the feature support for each platform license.


Note Items that are in italics are separate, optional licenses that you can add on to a base license. You can mix and match licenses, for example, the 10 security context license plus the Strong Encryption license; or the VPN Plus license plus the GTP/GPRS license; or all four licenses together.


Table 1 ASA 5500 Series Adaptive Security Appliance License Features 

Platforms and Features
Licenses
ASA 55101
Base License
Security Plus

Security Contexts

No support

No support

VPN Peers

50 IPSec
50 WebVPN

150 IPSec
150 WebVPN

Failover

None

Active/Standby

GTP/GPRS

Not supported

Not supported

Maximum VLANs

0

10

Concurrent Connections2

32 K

64 K

Max. Physical Interfaces

3 at 10/100 plus the Management interface for management traffic only (to-the-security-appliance)

Unlimited

Encryption

Base (DES)

Add-on license:
Strong (3DES/AES)

Base (DES)

Add-on license:
Strong (3DES/AES)

Minimum RAM

256 MB

256 MB

ASA 5520
Base License
N/A

Security Contexts

2

Add-on Licenses:

 

5

10

VPN Peers

300 IPSec
300 WebVPN

Add-on license:
VPN Plus
750 IPSec
750 WebVPN

Failover

Active/Standby
Active/Active

GTP/GPRS

None

Add-on license: Enabled

Maximum VLANs

25

Concurrent Connections2

130 K

Max. Physical Interfaces

Unlimited

Encryption

Base (DES)

Add-on license:
Strong (3DES/AES)

Minimum RAM

512 MB

ASA 5540
Base License
N/A

Security Contexts

2

Add-on licenses:

 

5

10

20

50

VPN Peers

500 IPSec
500 WebVPN

Add-on license:
VPN Plus
2000 IPSec
1250 WebVPN

Add-on license:
VPN Premium
5000 IPSec
2500 WebVPN

Failover

Active/Standby
Active/Active

GTP/GPRS

None

Add-on license: Enabled

Maximum VLANs

100

Concurrent Connections2

280 K

Max. Physical Interfaces

Unlimited

Encryption

Base (DES)

Add-on license:
Strong (3DES/AES)

Minimum RAM

1024 MB

1 The ASA 5510 does not support VPN load balancing.

2 The concurrent connections are based on a traffic mix of 80% TCP and 20% UDP, with one host and one dynamic translation for every four connections.


Table 2 PIX 500 Series Security Appliance License Features 

Platforms and Features
Licenses
PIX 515/515E1
R (Restricted)
UR (Unrestricted)
FO (Failover)2
FO-AA (Failover Active/Active)2

Security Contexts

No support

2

Add-on license:

2

Add-on license:

2

Add-on license:

5

5

5

VPN Peers

2000 IPSec

2000 IPSec

2000 IPSec

2000 IPSec

Failover

No support

Active/Standby
Active/Active

Active/Standby

Active/Standby
Active/Active

GTP/GPRS

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

Maximum VLANs

10

25

25

25

Concurrent Connections3

48 K

130 K

130 K

130 K

Max. Physical Interfaces

3

6

6

6

Encryption

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/
AES)

Minimum RAM

64 MB

128 MB

128 MB

128 MB

PIX 5251
R (Restricted)
UR (Unrestricted)
FO (Failover)2
FO-AA (Failover Active/Active)2

Security Contexts

No support

2

Add-on licenses:

2

Add-on licenses:

2

Add-on licenses:

5

10

20

50

5

10

20

50

5

10

20

50

VPN Peers

2000 IPSec

2000 IPSec

2000 IPSec

2000 IPSec

Failover

No support

Active/Standby
Active/Active

Active/Standby

Active/Standby
Active/Active

GTP/GPRS

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

Maximum VLANs

25

100

100

100

Concurrent Connections3

140 K

280 K

280 K

280 K

Max. Physical Interfaces

6

10

10

10

Encryption

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/
AES)

Minimum RAM

128 MB

512 MB

512 MB

512 MB

PIX 5351
R (Restricted)
UR (Unrestricted)
FO (Failover)2
FO-AA (Failover Active/Active)2

Security Contexts

No support

2

Add-on licenses:

2

Add-on licenses:

2

Add-on licenses:

5

10

20

50

5

10

20

50

5

10

20

50

VPN Peers

2000 IPSec

2000 IPSec

2000 IPSec

2000 IPSec

Failover

No support

Active/Standby
Active/Active

Active/Standby

Active/Standby
Active/Active

GTP/GPRS

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

None

Add-on license:
Enabled

Max. VLANs

50

150

150

150

Concurrent Connections3

250 K

500 K

500 K

500 K

Max. Physical Interfaces

8

14

14

14

Encryption

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/AES)

None

Add-on license:
Base (DES)

Add-on license:
Strong (3DES/
AES)

Minimum RAM

512 MB

1024 MB

1024 MB

1024 MB

1 The PIX 500 series security appliance does not support WebVPN.

2 This license can only be used in a failover pair with another unit with a UR license. Both units must be the same model.

3 The concurrent connections are based on a traffic mix of 80% TCP and 20% UDP, with one host and one dynamic translation for every four connections.