Migration Guide from Cisco PIX 500 to Cisco ASA 5500 Series
The Cisco ASA 5500 Series Adaptive Security Appliances bring a combination of powerful, multiple market-proven technologies in a single platform, making Cisco ASA5500 firewalls operationally and economically feasible for businesses to deploy in-depth security services to more locations. Migrate your Cisco PIX Security Firewall to the Cisco ASA 5500 Series for converged, multifunction security and VPN services within a single platform.
Primary Business Notions
Flexible Deployment Options include customized product editions tailored to address specific enterprise needs:
- Firewall Edition
- Intrusion Prevention System (IPS) Edition
- Content Security Edition
- SSL/IPSec VPN Edition
Lower Total Operating Expenditures (OpEx) can be definied as unified device management and monitoring results in lower overall installation and servicing costs. A single platform decreases complexity and simplifies deployments and ongoing support.
For Lower Capital Expenditures (CapEx), the convergence and enhanced Technology Migration Plan (TMP) credits reduce the total cost of migration today.
Primary Technology Factors
Built upon trusted Cisco PIX Security Appliance and Cisco VPN 3000 Series Concentrator technology, the Cisco ASA 5500 Series is the first solution to offer Secure Sockets Layer (SSL) and IP Security (IPsec) VPN services protected by market-leading firewall technology.
Proactive, full-featured intrusion prevention services stop a wide range of threats, including worms, application layer attacks, operating-system-level attacks, rootkits, spyware, and more.
The Cisco ASA 5500 Series offers comprehensive antivirus, antispyware, file blocking, antispam, antiphishing, URL blocking and filtering, and content filtering services, providing industry-leading Content Security services with Trend Micro’s expertise in threats and a proven network firewall solution.
The Cisco ASA 5500 Series takes advantage of customers' existing knowledge of Cisco PIX Security Appliances for easy migration to Cisco ASA 5500 solution.
Migration Options
| Cisco PIX Model |
Cisco ASA 5500 Model |
Cisco ASA 5500 Description |
| Cisco PIX 501 10 Users |
ASA5505-K8 |
Cisco ASA 5505 Firewall Edition 10-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, DES |
|
ASA5505-BUN-K9 |
Cisco ASA 5505 Firewall Edition 10-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5505-50-BUN-K9 |
Cisco ASA 5505 Firewall Edition 50-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5505-SSL10-K9 |
Cisco ASA 5505 VPN Edition, 10 IPsec VPN and 10 SSL VPN peers, firewall services, 8-port Fast Ethernet switch |
| Cisco PIX 501 50 Users |
ASA5505-50-BUN-K9 |
Cisco ASA 5505 Firewall Edition 50-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5505-UL-BUN-K9 |
Cisco ASA 5505 Firewall Edition Unlimited-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5505-SSL10-K9 |
Cisco ASA 5505 VPN Edition, 10 IPsec VPN and 10 SSL VPN peers, firewall services, 8-port Fast Ethernet switch |
| Cisco PIX 501 Unlimited Users |
ASA5505-UL-BUN-K9 |
Cisco ASA 5505 Firewall Edition Unlimited-user, 8-port Fast Ethernet switch, 10 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5505-SEC-BUN-K9 |
Cisco ASA 5505 Firewall Edition Unlimited-user Security Plus, 8-port Fast Ethernet switch, 25 IPsec VPN and 2 SSL VPN peers, DMZ, stateless Active/Standby high availability, 3DES/AES |
|
ASA5505-SSL10-K9 |
Cisco ASA 5505 VPN Edition, 10 IPsec VPN and 10 SSL VPN peers, firewall services, 8-port Fast Ethernet switch |
| Cisco PIX 506E |
ASA5505-SEC-BUN-K9 |
Cisco ASA 5505 Firewall Edition Unlimited-user Security Plus, 8-port Fast Ethernet switch, 25 IPsec VPN and 2 SSL VPN peers, DMZ, stateless Active/Standby high availability, 3DES/AES |
|
ASA5505-SSL25-K9 |
Cisco ASA 5505 VPN Edition, 25 IPsec VPN and 25 SSL VPN peers, firewall services, 8-port Fast Ethernet switch, Security Plus license |
|
ASA5510-K8 |
Cisco ASA 5510 Firewall Edition, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, DES |
|
ASA5510-BUN-K9 |
Cisco ASA 5510 Firewall Edition, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5510-AIP10-K9 |
Cisco ASA 5510 IPS Edition, AIP-SSM-10, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-CSC10-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-CSC20-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-SSL50-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 50 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL100-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 100 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL250-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 250 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
| Cisco PIX 515E R/DMZ |
ASA5510-K8 |
Cisco ASA 5510 Firewall Edition, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, DES |
|
ASA5510-BUN-K9 |
Cisco ASA 5510 Firewall Edition, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5510-SEC-BUN-K9 |
Cisco ASA 5510 Firewall Edition Security Plus, 2 Gigabit Ethernet ports, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, Active/Standby high availability, 3DES/AES Ethernet ports, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, Active/Standby high availability, 3DES/AES |
|
ASA5510-AIP10-K9 |
Cisco ASA 5510 IPS Edition, AIP-SSM-10, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-CSC10-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-CSC20-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-SSL50-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 50 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL100-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 100 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL250-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 250 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
| Cisco PIX 515E UR/FO/FO-AA |
ASA5510-SEC-BUN-K9 |
Cisco ASA 5510 Firewall Edition Security Plus, 2 Gigabit Ethernet ports, 3 Fast Ethernet ports, 250 IPsec VPN and 2 SSL VPN peers, Active/Standby high availability, 50 IPsec VPN and 2 SSL VPN peers, Active/Standby high availability, 3DES/AES |
|
ASA5520-K8 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby, high availability, DES |
|
ASA5520-BUN-K9 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby, high availability, 3DES/AES |
|
ASA5510-AIP10-K9 |
Cisco ASA 5510 IPS Edition, AIP-SSM-10, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet ports |
|
ASA5510-CSC10-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet Ports |
|
ASA5510-CSC20-K9 |
Cisco ASA 5510 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 250 IPsec VPN and 2 SSL VPN peers, 3 Fast Ethernet Ports |
|
ASA5510-SSL50-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 50 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL100-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 100 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
|
ASA5510-SSL250-K9 |
Cisco ASA 5510 VPN Edition, 250 IPsec VPN and 250 SSL VPN peers, firewall services, 3 Fast Ethernet ports |
| Cisco PIX 520 |
ASA5520-K8 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby, high availability, DES |
|
ASA5520-BUN-K9 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby, high availability, 3DES/AES |
|
ASA5520-AIP10-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-10, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-AIP20-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-20, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC10-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC20-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-SSL500-K9 |
Cisco ASA 5520 VPN Edition, 750 IPsec VPN and 500 SSL VPN peers, firewall services, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
| Cisco PIX 525R |
ASA5520-K8 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby high availability, DES |
|
ASA5520-BUN-K9 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby high availability, 3DES/AES |
|
ASA5520-AIP10-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-10, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-AIP20-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-20, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC10-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC20-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-SSL500-K9 |
Cisco ASA 5520 VPN Edition, 750 IPsec VPN and 500 SSL VPN peers, firewall services, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
| Cisco PIX 525 UR/FO/FO-AA |
ASA5520-K8 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby high availability, DES |
|
ASA5520-BUN-K9 |
Cisco ASA 5520 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 750 IPsec VPN and 2 SSL VPN peers, Active/Active and Active/Standby high availability, 3DES/AES |
|
ASA5520-AIP10-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-10, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-AIP20-K9 |
Cisco ASA 5520 IPS Edition, AIP-SSM-20, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC10-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-10, 50-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5520-CSC20-K9 |
Cisco ASA 5520 Content Security Edition, CSC-SSM-20, 500-user antivirus/anti-spyware with 1-yr subscription, firewall services, 750 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
| Cisco PIX 525 UR/FO/FO-AA |
ASA5520-SSL500-K9 |
Cisco ASA 5520 VPN Edition, 750 IPsec VPN and 500 SSL VPN peers, firewall services, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5540-K8 |
Cisco ASA 5540 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 5000 IPsec VPN and 2 SSL VPN peers, DES |
|
ASA5540-BUN-K9 |
Cisco ASA 5540 Firewall Edition, 4 Gigabit Ethernet ports + 1 Fast Ethernet interface, 5000 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5540-AIP20-K9 |
Cisco ASA 5540 IPS Edition, AIP-SSM-20 module, Firewall services, 5000 IPsec VPN and 2 SSL VPN peers, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5540-SSL1000-K9 |
Cisco ASA 5540 VPN Edition, 5000 IPsec VPN and 1000 SSL VPN peers, firewall services, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5540-SSL2500-K9 |
Cisco ASA 5540 VPN Edition, 5000 IPsec VPN and 2500 SSL VPN peers, firewall services, 4 Gigabit Ethernet ports, 1 Fast Ethernet interface |
| Cisco PIX 535 |
ASA5550-K8 |
Cisco ASA 5550 Firewall Edition, 8 Gigabit Ethernet ports + 1 Fast Ethernet interface, 4 Gigabit SFP ports, 5000 IPsec VPN and 2 SSL VPN peers, DES |
|
ASA5550-BUN-K9 |
Cisco ASA 5550 Firewall Edition, 8 Gigabit Ethernet ports + 1 Fast Ethernet interface, 4 Gigabit SFP ports, 5000 IPsec VPN and 2 SSL VPN peers, 3DES/AES |
|
ASA5550-SSL2500-K9 |
Cisco ASA 5550 VPN Edition, 5000 IPsec VPN and 2500 SSL VPN peers, firewall services, 8 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5550-SSL5000-K9 |
Cisco ASA 5550 VPN Edition, 5000 IPsec VPN and 5000 SSL VPN peers, firewall services, 8 Gigabit Ethernet ports, 1 Fast Ethernet interface |
|
ASA5580-20-BUN-K8 |
Cisco ASA 5580-20 Firewall Edition includes 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, DES license |
|
ASA5580-20-BUN-K9 |
Cisco ASA 5580-20 Firewall Edition includes 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, 3DES/AES license |
|
ASA5580-40-BUN-K8 |
Cisco ASA 5580-40 Firewall Edition includes 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, DES license |
|
ASA5580-40-BUN-K9 |
Cisco ASA 5580-40 Firewall Edition includes 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, 3DES/AES license |
|
ASA5580-20-4GE-K9 |
Cisco ASA 5580-20 Firewall Edition 4 Gigabit Ethernet Bundle includes 4 Gigabit Ethernet interfaces, 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, Dual AC Power, 3DES/AES License |
|
ASA5580-40-8GE-K9 |
Cisco ASA 5580-20 Firewall Edition 8 Gigabit Ethernet Bundle includes 8 Gigabit Ethernet interfaces, 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, Dual AC power, 3DES/AES license |
|
ASA5580-40-10GE-K9 |
Cisco ASA 5580-40 Firewall Edition 8 Gigabit Ethernet Bundle includes 8 Gigabit Ethernet interfaces, 2 management interfaces, 5000 IPsec VPN peers, 2 SSL VPN peers, Dual AC power, 3DES/AES license |
|
ASA5580-20-5K-K9 |
Cisco ASA 5580-40 Firewall Edition 4 10Gigabit Ethernet Bundle includes 4 10Gigabit Ethernet interfaces; 2 management interfaces; 5000 IPsec VPN peers; 2 SSL VPN peers, Dual power, 3DES/AES license |
|
ASA5580-20-10K-K9 |
Cisco ASA 5580 VPN Edition includes 10,000 IPsec VPN and 10,000 SSL VPN peers, firewall services, 4 Gigabit Ethernet interfaces, 2 management interfaces, Dual AC power, 3DES/AES License |
We hope this helps!
View all Cisco ASA Firewalls
|