ASA5585-S20X-K9
Today’s enterprise networks struggle to keep up with a mobile workforce. Users expect on-demand access from their many devices, even as applications multiply and push performance levels. And of course security remains a priority. How do you scale and still preserve the integrity of the network? Start with the Cisco(R) ASA 5585-X Next-Generation Firewall, a compact yet high-density firewall that delivers tremendous scalability, performance, and security in a two-rack-unit (2RU) footprint.
Using a single firewall blade, the Cisco ASA 5585-X meets the growing needs of dynamic organizations by providing eight times the performance density, very high VPN session counts, twice as many connections per second, and four times the connection capacity of any competitive firewall.
Support for Layer 3 and Layer 4 stateful firewall inspection features, including access control and network address translation, enables organizations to keep existing stateful inspection policies that are essential for compliance regulations. The context-aware Cisco Intrusion Prevention System (IPS) services provide the capability to act more intelligently and aggressively against threats that pose a significant risk to organizations.
In addition to comprehensive stateful inspection capabilities, Layer 7 next-generation policies act intelligently on contextual information. Cisco AnyConnect(R) technology provides information on the type and location of a mobile device before it accesses the network, so that administrators can maintain high levels of network protection and control. Threat intelligence feeds from Cisco Collective Security Intelligence (CSI) use the global footprint of Cisco security deployments to analyze approximately one-third of the world’s Internet traffic for near-real-time protection from zero-day threats.
The Cisco ASA 5585-X supports two hardware blades in a single 2RU chassis. The bottom slot (slot 0) hosts the ASA stateful inspection firewall module, while the top slot (slot 1) can be used for adding a dedicated Cisco IPS, Cisco ASA with FirePOWER Services, or a second stateful inspection firewall module. Multiple integrated security services within a single chassis provide broad deployment flexibility and investment protection. The ability to add a second stateful inspection firewall module doubles the firewall performance for superior scalability, performance density, and security for data center use cases. In addition, the top slot can optionally be populated with up to two Cisco ASA 5585-X I/O modules for high interface density for mission-critical data centers that require exceptional flexibility and security.
Using Cisco ASA Software Release 9.0 and later, customers can combine up to 16 Cisco ASA 5585-X firewall modules in a single cluster for up to 640 Gbps of throughput, 2 million connections per second, and more than 100 million concurrent connections . This “pay as you grow” model enables organizations to purchase what they need today and dynamically add more when their performance needs grow. To protect high-performance data centers from internal and external threats, the cluster can be augmented by adding IPS modules.
Cisco ASA software clustering delivers a consistent scaling factor, irrespective of the number of units in the cluster, for a linear and predictable increase in performance. Complexity is reduced, as no changes are required to existing Layer 2 and Layer 3 networks. Support for data center designs based on the Cisco Catalyst(R) 6500 Series Virtual Switching System (VSS) and the Cisco virtual PortChannel (vPC) as well as the Link Aggregation Control Protocol (LACP) provides high availability (HA) with better network integration.
For operational efficiency, Cisco ASA clusters are easy to manage and troubleshoot. Policies pushed to the master node are replicated across all the units within the cluster. The health, performance, and capacity statistics of the entire cluster, as well as individual units within the cluster, can be assessed from a single management console. Hitless software upgrades are supported for ease of device updates.
Clustering supports HA in both active/active and active/passive modes. All units in the cluster actively pass traffic, and all connection information is replicated to at least one other unit in the cluster to support N+1 HA. In addition, single and multiple contexts are supported, along with routed and transparent modes. A single configuration is maintained across all units in the cluster using automatic configuration sync. Clusterwide statistics are provided to track resource usage.
Using Cisco ASA Software Release 9.0 and later, the Cisco ASA 5585-X provides context awareness through the integration of identity-based firewall security and Cisco TrustSec(R) security group tags for enhanced visibility and control. Identity-based firewall security provides more flexible access control to enforce policies based on user and group identities and the point of access. Administrators can write policies that correspond to business rules, a process that increases security, enhances ease of use, and requires fewer policies to manage. Similarly, Cisco TrustSec integration enables security group tags to be embedded into the network, providing administrators with the ability to develop and enforce better, more precise policies.
The Cisco ASA 5585-X Next-Generation Firewall delivers superior scalability, performance, and security to handle high data volumes without sacrificing performance. Most firewalls require up to 16RUs and 5100 watts to scale to the level of performance that the Cisco ASA 5585-X achieves with only 2RUs and 785 watts. This performance helps enterprises meet the increasing demands for network connectivity without the need to invest in additional data center space and incur the corresponding maintenance costs.
Based on tests conducted by Cisco, the Cisco ASA 5585-X significantly reduces initial procurement costs by 80 percent, power consumption costs by 85 percent, and rack space requirements by 88 percent in addition to significant reductions in overall integration and management complexity and costs. In addition, you can install up to two firewall modules in a single Cisco ASA 5585-X chassis, providing scalability to 80 Gbps.
Table 1 gives the capabilities of the four Cisco ASA 5585-X models.
Table 1.Cisco ASA 5585-X Next-Generation Firewall Capabilities and Capacities
Data center
Data center
10,000,000
Active Directory agent, LDAP, Kerberos, NTLM
Active Directory agent, LDAP, Kerberos, NTLM
Active Directory agent, LDAP, Kerberos, NTLM
Active Directory agent, LDAP, Kerberos, NTLM
Up to 5,000
Up to 10,000
Up to 10,000
Up to 10,000
Up to 5,000
Up to 10,000
Up to 10,000
Up to 10,000
8-port 10/100/1000, 2-port 10 Gigabit Ethernet** (SFP+)
8-port 10/100/1000, 2-port 10 Gigabit Ethernet** (SFP+)
6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)
6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)
16-port 10/100/1000, 4-port 10 Gigabit Ethernet** (SFP+) (with 2 modules per chassis)
16-port 10/100/1000, 4-port 10 Gigabit Ethernet** (SFP+) (with 2 modules per chassis)
12-port 10/100/1000,8-port 10 Gigabit Ethernet (SFP+) (with 2 modules per chassis)
12-port 10/100/1000, 8-port 10 Gigabit Ethernet (SFP+) (with 2 modules per chassis)
2-port 10/100/1000
2-port 10/100/1000
2-port 10/100/1000
2-port 10/100/1000
8-port 10/100/1000, 2-port 10 Gigabit Ethernet*** (SFP+)
8-port 10/100/1000, 2-port 10 Gigabit Ethernet*** (SFP+)
6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)
6-port 10/100/1000, 4-port 10 Gigabit Ethernet (SFP+)
16-port 10/100/1000, 4-port 10 Gigabit Ethernet*** SFP+ (with 2 modules per chassis)
16-port 10/100/1000, 4-port 10 Gigabit Ethernet*** SFP+ (with 2 modules per chassis)
12-port 10/100/1000,8-port 10 Gigabit Ethernet SFP+ (with 2 modules per chassis)
12-port 10/100/1000, 8-port 10 Gigabit Ethernet SFP+ (with 2 modules per chassis)
VPN clustering and load balancing
VPN clustering and load balancing
VPN clustering and load balancing
VPN clustering and load balancing
Active/active and Active/standby
Active/active6 and Active/standby
Active/active6 and Active/standby
Active/active6 and Active/standby
Supported, second power supply optional
Supported, second power supply optional
Supported, second power supply optional
1 RJ-45, console and auxiliary
1 RJ-45, console and auxiliary
1 RJ-45, console and auxiliary
1 RJ-45, console and auxiliary
Yes, rack mounts included
Yes, rack mounts included
Yes, rack mounts included
Yes, rack mounts included
6 GB (SSP-10) 12 GB (with 2 modules per chassis)
12 GB (SSP-20) 24 GB (with 2 modules per chassis)
12 GB (SSP-40) 36 GB (with 2 modules per chassis)
24 GB (SSP-60) 72 GB (with 2 modules per chassis)
2 GB (SSP-10)
4 GB (with 2 modules per chassis)
2 GB (SSP-20)
4 GB (with 2 modules per chassis)
2 GB (SSP-40)
4 GB (with 2 modules per chassis)
2 GB (SSP-60)
4 GB (with 2 modules per chassis)
32 to 104°F
(0 to 40°C)
32 to 104°F
(0 to 40°C)
32 to 104°F
(0 to 40°C)
32 to 104°F
(0 to 40°C)
10 to 90 percent noncondensing
10 to 90 percent noncondensing
10 to 90 percent noncondensing
10 to 90 percent noncondensing
Designed and tested for
0 to 10,000 ft (3050 m)
Designed and tested for
0 to 10,000 ft (3050 m)
Designed and tested for
0 to 10,000 ft (3050 m)
Designed and tested for
0 to 10,000 ft (3050 m)
65 dBa max
65 dBa max
65 dBa max
65 dBa max
-40 to +158°F
(-40 to +70°C)
-40 to +158°F
(-40 to +70°C)
-40 to +158°F
(-40 to +70°C)
-40 to +158°F
(-40 to +70°C)
5 to 95 percent noncondensing
5 to 95 percent noncondensing
5 to 95 percent noncondensing
5 to 95 percent noncondensing
0 to 30,000 ft (9144 m)
0 to 30,000 ft (9144 m)
0 to 30,000 ft (9144 m)
0 to 30,000 ft (9144 m)
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
100 to 240 VAC
9A (100 VAC),
4.5A (200 VAC)
9A (100 VAC),
4.5A (200 VAC)
9A (100 VAC),
4.5A (200 VAC)
9A (100 VAC),
4.5A (200 VAC)
50 to 60 Hz
50 to 60 Hz
50 to 60 Hz
50 to 60 Hz
320W (1 SSP only)
670W (with 2 modules per chassis)
320W (1 SSP only)
670W (with 2 modules per chassis)
320W (1 SSP only)
670W (with 2 modules per chassis)
320W (1 SSP only)
670W (with 2 modules per chassis)
370W (1 SSP only)
770W (with 2 modules per chassis)
370W (1 SSP only)
770W (with 2 modules per chassis)
370W (1 SSP only)
770W (with 2 modules per chassis)
370W (1 SSP only)
770W (with 2 modules per chassis)
3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)
3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)
3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)
3960 Btu/hr (100 VAC), 5450 Btu/hr (200 VAC)
2RU, 19-in. rack-mountable
2RU, 19-in. rack-mountable
2RU, 19-in. rack-mountable
2RU, 19-in. rack-mountable
3.47 x 19 x 26.5 in.
(8.8x 48.3 x 67.3 cm)
3.47 x 19 x 26.5 in.
(8.8x 48.3 x 67.3 cm)
3.47 x 19 x 26.5 in.
(8.8x 48.3 x 67.3 cm)
3.47 x 19 x 26.5 in.
(8.8x 48.3 x 67.3 cm)
50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg) with 2 modules per chassis and dual power supplies
50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg) with 2 modules per chassis and dual power supplies
50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg) with 2 modules per chassis and dual power supplies
50 lb (22.7 kg) with 1 SSP and single power supply 62 lb (28.2 kg) with 2 modules per chassis and dual power supplies
UL 60950-1, CAN/CSA-C22.2 No. 60950-1
EN 60950-1, IEC 60950-1, AS/NZS 43
UL 60950-1, CAN/CSA-C22.2 No. 60950-1
EN 60950-1, IEC 60950-1, AS/NZS 43
UL 60950-1, CAN/CSA-C22.2 No. 60950-1
EN 60950-1, IEC 60950-1, AS/NZS 43
UL 60950-1, CAN/CSA-C22.2 No. 60950-1
EN 60950-1, IEC 60950-1, AS/NZS 43
47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN, EN, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series
47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN, EN, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series
47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN, EN, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series
47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN, EN, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series
Note: Performance numbers were tested and validated with Cisco ASA Software Release 8.4.
11.5 lb (5.2 kg)
UL 60950-1, CAN/CSA-C22.2 No. 60950-1
EN 60950-1, IEC 60950-1, AS/NZS 60950-1
47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A,
CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A
EN, EN, KN22 Class A, CNS13438 Class A,
EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series
Mission-critical data centers running Cisco ASA Software Release 8.4.4 and later can use the top slot of the Cisco ASA 5585-X to add up to two Cisco ASA 5585-X I/O modules for exceptional flexibility and security. With two Cisco ASA 5585-X I/O modules, a single Cisco ASA 5585-X can support up to twenty 10 Gigabit Ethernet ports or up to fifty 1 Gigabit Ethernet ports. Using the Cisco ASA 5585-X Divider, the top slot is partitioned into two half-slots, with each I/O module occupying one half-slot. When only one I/O module is installed, a half-slot blank cover is required to cover the empty half-slot.
Table 2 describes each of the Cisco ASA 5585-X I/O modules in more detail.
Table 2.Cisco ASA 5585-X I/O Modules
ASA5585-NM-8-10GE
ASA5585-NM-4-10GE
ASA5585-NM-20-1GE
ASA5585-SEPTUM
ASA5585-BLANK-H
ASA5585-NM-8-10GE=
ASA5585-NM-4-10GE=
ASA5585-NM-20-1GE=
ASA5585-SEPTUM=
ASA5585-BLANK-H=
Table 3 lists the 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) and 1 Gigabit Ethernet SFPs that are supported.
Table 3.Supported SFP and SFP+ Modules
Cisco 1000 Base-SX SFP module, MMF, 850nm, DOM
Cisco 1000 Base-LX/LH SFP module, MMF/SMF, 1310nm, DOM
Cisco 1000BASE-T copper SFP
Cisco 1000BASE-EX SFP module, SMF, 1550nm, DOM
Cisco 1000BASE-ZX SFP module, SMF, 1310nm, DOM
GLC-SX-MMD
GLC-LH-SMD
GLC-ZX-SMD
GLC-EX-SMD
10G SR SFP+ modules
10G LRM SFP+ module
10G LR SFP+ module
10G ER SFP+ module
10G BASE-CU SFP+ cable 1 meter, passive
10G BASE-CU SFP+ cable 3 meter, passive
10G BASE-CU SFP+ cable 5 meter, passive
10G BASE-CU SFP+ cable 7 meter, active
10G BASE-CU SFP+ cable 10 meter, active
SFP-10G-SR
SFP-10G-LRM
SFP-10G-LR
SFP-10G-ER
SFP-H10GB-CU1M
SFP-H10GB-CU3M
SFP-H10GB-CU5M
SFP-H10GB-ACU7M
SFP-H10GB-ACU10M
Service providers and data centers that require data-center-powered equipment can purchase Cisco ASA 5585-X data center power supply modules with built-in fans. These power supplies deliver up to 1150 watts of data center power for Cisco ASA 5585-X Next-Generation Firewalls. Two data center power supplies are required for each Cisco ASA 5585-X chassis. The minimum software required is Cisco ASA Software Release 8.4.5.
Find warranty information on Cisco.com at the
Help customers understand all the components or parts they need to purchase in order to install and use the product.
To place an order, visit the .
Table 4 lists part numbers for customer convenience.
Table 4.Ordering Information
Cisco ASA 5585-X Firewall Edition SSP-10 bundle includes 8 Gigabit Ethernet interfaces, 2 Gigabit Ethernet SFP interfaces, 2 Gigabit Ethernet management interfaces, 5000 IPsec VPN peers, 2 Premium VPN peers, DES license
Cisco ASA 5585-X Firewall Edition SSP-10 bundle includes 8 Gigabit Ethernet interfaces, 2 Gigabit Ethernet SFP interfaces, 2 Gigabit Ethernet management interfaces, 5000 IPsec VPN peers, 2 Premium VPN peers, 3DES/AES license
Cisco ASA 5585-X Security Plus Firewall Edition SSP-10 bundle includes 8 Gigabit Ethernet interfaces, 2 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 5000 IPsec VPN peers, 2 Premium VPN peers, dual AC power, 3DES/AES license
ASA5585-S10X-K9
Cisco ASA 5585-X Firewall Edition SSP-20 bundle includes 8 Gigabit Ethernet interfaces, 2 Gigabit Ethernet SFP interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers,
DES license
Cisco ASA 5585-X Firewall Edition SSP-20 bundle includes 8 Gigabit Ethernet interfaces, 2 Gigabit Ethernet SFP interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers, 3DES/AES license
Cisco ASA 5585-X Security Plus Firewall Edition SSP-20 bundle includes 8 Gigabit Ethernet interfaces, 2 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers, dual AC power, 3DES/AES license
ASA5585-S20X-K9
Cisco ASA 5585-X Firewall Edition SSP-40 bundle includes 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers,
DES license
Cisco ASA 5585-X Firewall Edition SSP-40 bundle includes 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers, 3DES/AES license
Cisco ASA 5585-X Firewall Edition SSP-40 bundle includes 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers,
dual AC power, 3DES/AES license
Cisco ASA 5585-X Firewall Edition SSP-60 bundle includes 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers,
dual AC power, 3DES/AES license
Cisco ASA 5585-X Firewall Edition SSP-60 bundle includes 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces, 10,000 IPsec VPN peers, 2 Premium VPN peers,
dual AC power, 3DES/AES license
Cisco ASA 5585-X SSL/IPsec VPN Edition SSP-10 Bundle includes 5000 IPsec VPN peers, 5000 Premium VPN peers, firewall services, 8 Gigabit Ethernet interfaces, 2 management interfaces, 3DES/AES license
Cisco ASA 5585-X SSL/IPsec VPN Edition SSP-20 Bundle includes 10,000 IPsec VPN peers, 10,000 Premium VPN peers, firewall services, 8 Gigabit Ethernet interfaces, 2 management interfaces, 3DES/AES license
Cisco ASA 5585-X SSL/IPsec VPN Edition SSP-40 Bundle includes 10,000 IPsec VPN peers, 10,000 Premium VPN peers, firewall services, 8 Gigabit Ethernet interfaces, 2 management interfaces, 3DES/AES license
Cisco ASA 5585-X SSL/IPsec VPN Edition SSP-60 Bundle includes 10,000 IPsec VPN peers, 10,000 Premium VPN peers, firewall services, 8 Gigabit Ethernet interfaces, 2 management interfaces, 3DES/AES license
Cisco ASA 5585-X Security Services Processor-10 (SSP-10)
ASA-SSP-10-K8=
Cisco ASA 5585-X Security Services Processor-20 (SSP-20)
ASA-SSP-20-K8=
Cisco ASA 5585-X Security Services Processor-40 (SSP-40)
ASA-SSP-40-K8=
Cisco ASA 5585-X Security Services Processor-60 (SSP-60)
ASA-SSP-60-K8=
Cisco ASA 5585 DC Power Supply (configurable option)
ASA5585-DC-PWR
Cisco ASA 5585 DC Power Supply (spare)
ASA5585-DC-PWR=
Cisco ASA 5585-X SSP40 DC Power bundle
ASA5585- S40-2D-K9
Cisco ASA 5585-X SSP60 DC Power bundle
ASA5585- S60-2D-K9
<div class="section pdtdetail" tab="商品评论 (0)"> 商品评论
如果您对本商品有什么评价或经验,欢迎分享!
友情链接：配电箱中总的断路器怎样选择_百度知道
配电箱中总的断路器怎样选择
配电箱所有电机的功率加起来大约50kw根据什么公式选择总的断路器 是不是总的功率除以（1.732*0.38）结果在乘以1.5啊
我有更好的答案
配电箱里总断路器应该根据这一路电源的容量来选择，而不能根据几路负载相加来选择。负载是变化的，以后负载增加了难道总开关也跟着换吗？所以各分路开关保护各自分路，总开关的电流应该根据变压器电流或电缆的额定电流来决定。
采纳率：68%
这要根据这个配电箱里最大功率的电机的负荷(用途)、起动方式来决定断路器的大小。如果起动时负荷重、起动时间长并且是直接起动的话，就需按额定电流的5-7倍选择总断电器，否则，过小会经常烧坏总断路器，过大就是浪费;如果是软起动的话按额定电流的2-3倍则可满足要求
如果不是严格要求那个根据你的总负载来选择总开关，就是功率/380.
为您推荐：
其他类似问题
配电箱的相关知识
换一换
回答问题，赢新手礼包
个人、企业类
违法有害信息,请在下方选择后提交
色情、暴力
我们会通过消息、邮箱等方式尽快将举报结果通知您。
