Device Type

Security appliance

Enclosure Type

Rack-mountable - 1U

RAM Installed (Max)

4 GB

Flash Memory Installed (Max)

64 MB flash

Data Link Protocol

Ethernet, Fast Ethernet, Gigabit Ethernet

Network / Transport Protocol

IPSec

VPN throughput

425 Mbps

Firewall throughput

1.2 Gbps

Connection rate

36000 connections per second

Concurrent connections

650000

IPSec VPN peers

5000

SSL VPN peers

2

UC proxy sessions

3000

Virtual interfaces (VLANs)

250

Intrusion Prevention Services

The optional Cisco ASA 5500 Series AIP SSM applies intrusion prevention services to protect the unified communications infrastructure and call-control servers from IPS signature-based attacks. The AIP SSM provides IPS services that are optimized for unified communications and support specific unified communications engines such as the H.323 and H.225 inspection engines; it also helps prevent OS attacks on call-control servers.
Unique intrusion prevention capabilities such as anomaly detection, OS fingerprinting capabilities, and risk-rating features provide better context on threats to prevent false positives.

Perimeter Security Services

Phone Proxy

Phone proxy delivers secure remote access without the need for a remote-access VPN device. It does so by terminating SCCP and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. Phone proxy supports Cisco Unified Communications Manager mixed and nonsecure modes. You can deploy phone proxy behind an existing firewall or as an integrated firewall or phone proxy appliance.

Mobility Proxy

Mobile proxy protects Cisco Unified Mobility solutions, and replaces Cisco Unified Mobility Proxy. It incorporates a new inspection engine to validate mobility traffic, including protocol conformance for Cisco Unified Mobile Communicator running on Blackberry, Symbian, and Windows mobile devices.

Presence

This mandatory federation component of Cisco Unified Presence with Microsoft Presence solutions secures presence information and applies security policies (white list, black list, and protocol conformance) between two organizations.

SSL and IPsec VPN

Robust encrypted SSL and IPsec VPN services for both unified communications and data traffic offer preconnection posture assessment for endpoints and the ability to apply policies and inspection capabilities to VPN traffic to prevent remote users from introducing vulnerabilities into your network. Cisco AnyConnect delivers optimization for voice with support of Datagram Transport Layer Security (DTLS), and secures third-party endpoints such as Apple iPhones.