Cisco Small Business Pro SA 500 Series Security Appliances

Cisco SA 500 Series Security Appliance Models and Specifications	SA 520	SA 520W	SA 540
SKU	SA520-K9	SA520W-K9	SA540-K9
Ports
Stateful packet inspection throughput*	200 Mbps	200 Mbps	300 Mbps
Unified threat management (UTM) throughput	200 Mbps	200 Mbps	300 Mbps
Connections	15,000	15,000	40,000
Rules	100	100	100
Schedules	Yes	Yes	Yes
VPN
Triple Data Encryption Standard (3DES)/ Advanced Encryption Standard (AES) VPN throughput*	65 Mbps	65 Mbps	85 Mbps
IPsec VPN tunnels	50 max	50 max	100 max
SSL VPN tunnels	2 seats included; license required to upgrade to 25 seats (max)	2 seats included; license required to upgrade to 25 seats (max)	50 seats (max) included
Dead peer detection	Yes	Yes	Yes
IPsec Network Address Translation (NAT) traversal	Yes	Yes	Yes
NetBIOS broadcast over VPN	Yes	Yes	Yes
Trend Micro ProtectLink Gateway
URL filtering	80+ categories	80+ categories	80+ categories
Web threat protection	Yes	Yes	Yes
Antispam protection	Yes	Yes	Yes
Virus patterns	More than 3 million	More than 3 million	More than 3 million
Spyware patterns	More than 420,000	More than 420,000	More than 420,000
Wireless
802.11b/g/n	No	Yes	No
2 x 3 multiple input, multiple output (MIMO)	No	Yes	No
2.4 GHz	No	Yes	No
Wi-Fi Multimedia (WMM) quality of service (QoS)	No	Yes	No
Unscheduled automatic power save delivery (U-APSD) (WMM Power Save [WMM-PS])	No	Yes	No
MAC filtering	No	Yes	No
Wired Equivalent Privacy (WEP), Wi-Fi Protected Access Pre-Shared Key (WPA2-PSK), WPA2-ENT	No	Yes	No
Basic service set identifier (BSSID) or virtual access points	No	Yes; 4 supported	No
Ability to dynamically or manually adjust transmit power	No	Yes	No
Wi-Fi Protected Setup (WPS)	No	Yes	No
Other
Routing	Static, Routing Information Protocol (RIP) v1, v2	Static, RIP v1, v2	Static, RIP v1, v2
VLANs	16	16	16
IPsec/Point-to-Point Tunneling Protocol (PPTP)/Layer 2 Tunneling Protocol (L2TP) pass-through	Yes	Yes	Yes
Message digest	MD5/SHA1/SHA2	MD5/SHA1/SHA2	MD5/SHA1/SHA2
Encryption	DES/3DES/AES	DES/3DES/AES	DES/3DES/AES
User database	100	100	400
Dynamic DNS (DDNS)	Yes	Yes	Yes
Load balancing	Yes	Yes	Yes
Integrated and automated failover and failback	Yes, using optional port for dual WAN	Yes, using optional port for dual WAN	Yes, using optional port for dual WAN
VeriSign VIP support	Yes	Yes	Yes
Physical interfaces	All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable 4 LAN ports 1 WAN port 1 optional port for use as LAN, WAN, or DMZ port 1 USB 2.0 port 1 power switch	All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable 4 LAN ports 1 WAN port 1 optional port for use as LAN, WAN, or DMZ port 1 USB 2.0 port 1 power switch 3 external antennas	All Ethernet ports 10BASE-T, 100BASE-TX, 1000BASE-T capable 8 LAN ports 1 WAN port 1 optional port for use as LAN, WAN, or DMZ port 1 USB 2.0 port 1 power switch
Environmental operating temperature	32° to 104°F (0° to 40°C)	32° to 104°F (0° to 40°C)	32° to 104°F (0° to 40°C)
Storage temperature	-4° to 158°F (-20° to 70°C)	-4° to 158°F (-20° to 70°C)	-4° to 158°F (-20° to 70°C)
Internal Power Supply
Voltage range	90 to 264 VAC single phase	90 to 264 VAC single phase	90 to 264 VAC single phase
Input frequency	47 to 63 Hz	47 to 63 Hz	47 to 63 Hz
Output voltage regulation	11.4V ~ 12.6V	11.4V ~ 12.6V	11.4V ~ 12.6V
Output current	Max 2.5A	Max 2.5A	Max 2.5A
Physical Specifications
Form factor	1 RU, 19-in. rack mountable	1 RU, 19-in. rack mountable	1 RU, 19-in. rack mountable
Dimensions (H x W x D)	1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm)	1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm) without antennas	1.73 x 12.12 x 7.08 inches (44 x 308 x 180 mm)
Weight (with internal power supply)	4.91 lb (2.23 kg)	5.15 lb (2.34 kg)	5.14 lb (2.34 kg)
Cisco SA 500 Series Security Appliance Models and Specifications	SA 520	SA 520W	SA 540

*Performance test methodology: Maximum performance based on RFC 2544. All results are aggregate bidirectional. Actual performance may vary upon network environment and configuration.

• Additional Resources