Protect your data with powerful online security.
Firewall Benefits
  • Reliable and secure network
  • 24/7 support available
  • Anti-spam protection
  • Latest security updates

Cisco SSL Benefits

 

Network Remote Access

Full network access provides network-layer remote-user connectivity to virtually any application or network resource and is often used to extend access to managed computers such as company-owned laptops. Connectivity is available through the automatically downloaded Cisco AnyConnect VPN Client, the Cisco IPsec VPN Client, and the Microsoft and Mac OS X Layer 2 Tunneling Protocol (L2TP)/IPsec VPN clients. The Cisco AnyConnect VPN Client will automatically adapt its tunneling protocol to the most efficient method based on network constraints and is the first VPN product to use the DTLS protocol to provide an optimized connection for latency-sensitive traffic, such as voice over IP (VoIP) traffic or TCP-based application access. By supporting SSL, DTLS, and IPsec-based remote-access VPN technologies, the Cisco ASA 5500 Series delivers unsurpassed flexibility to meet the needs of the most diverse deployment scenarios.

Remote User Connectivity

Full network access provides network-layer remote-user connectivity to virtually any application or network resource and is often used to extend access to managed computers such as company-owned laptops. Connectivity is available through the automatically downloaded Cisco AnyConnect VPN Client, the Cisco IPsec VPN Client, and the Microsoft and Mac OS X Layer 2 Tunneling Protocol (L2TP)/IPsec VPN clients. The Cisco AnyConnect VPN Client will automatically adapt its tunneling protocol to the most efficient method based on network constraints and is the first VPN product to use the DTLS protocol to provide an optimized connection for latency-sensitive traffic, such as voice over IP (VoIP) traffic or TCP-based application access. By supporting SSL, DTLS, and IPsec-based remote-access VPN technologies, the Cisco ASA 5500 Series delivers unsurpassed flexibility to meet the needs of the most diverse deployment scenarios.

Clientless Remote Access

Clientless remote access provides access to network applications and resources, regardless of location, without the need for desktop VPN client software. Using the ubiquity of SSL encryption available in Internet browsers, the Cisco ASA 5500 Series delivers clientless access to any Web-based application or resource, terminal services applications such as Citrix, and optimized Microsoft Outlook Web access and Lotus iNotes, as well as access to common thick-client applications like e-mail and calendering, instant messaging, FTP, Telnet, and SSH. Additionally, the superior content rewriting capabilities of the Cisco ASA 5500 Series help ensure reliable rendering of complex Web pages with Java, JavaScript, ActiveX, Flash, and other sophisticated content.

High-Speed Internet via VPN

Secure, high-speed internet communications are possible between multiple office locations. Support for quality of service (QoS) and routing across the VPN helps ensure reliable, business-quality delivery of latency-sensitive applications like voice, video, and terminal services.

Threat Protected VPN Security

VPNs are a primary source of malware infiltration into networks. Malware includes worms, viruses, spyware, keyloggers, Trojan horses, and rootkits. The depth and breadth of intrusion prevention, antivirus, application-aware firewall, and VPN security capabilities in the Cisco ASA 5500 Series minimizes the risk that the VPN connection will become a conduit for security threats.

Cost-effective VPN service

Scaling and securing VPNs often requires additional load balancing and security equipment, which increases both equipment and operational costs. The Cisco ASA 5500 Series integrates these functions, delivering an unprecedented level of network and security integration among the VPN products available today. And by offering support for flexible tunneling options on a single platform, the Cisco ASA 5500 Series provides customers with cost-effective VPN alternatives to deploying parallel VPN infrastructures.

Scalability and Resiliency

The Cisco ASA 5500 Series can support up to 5000 simultaneous user sessions per device, with the ability to scale to tens of thousands of simultaneous user sessions through integrated clustering and load-balancing capabilities. Stateful failover features deliver high-availability services for unsurpassed uptime.

Firewall Network Security | Cisco SSL

Highly secure Cisco ASA 5500 Series SSL/IPsec VPN Edition.

The Cisco® ASA 5500 Series Adaptive Security Appliance is a purpose-built platform that combines best-in-class security and VPN services for small and medium-sized business (SMB) and enterprise applications. The Cisco ASA 5500 Series enables customization for specific deployment environments and options, with special product editions for SSL/IPsec VPN, Firewall Network Security, Content Security, and Intrusion Prevention.

The Cisco ASA 5500 Series SSL/IPsec VPN Edition enables organizations to gain the connectivity and cost benefits of Internet transport without compromising the integrity of corporate security policies. By converging Secure Sockets Layer (SSL) and an IP Security (IPsec) VPN service with comprehensive threat defense technologies, the Cisco VPN client delivers highly customizable network access tailored to the requirements of diverse deployment environments while providing advanced endpoint and network-level security (Figure 1).

Figure 1. A Customizable VPN Service for any Deployment Scenario

Cisco ASA 5500 Series SSL/IPSEC VPN Edition

The Cisco ASA 5500 Series SSL/IPsec VPN Edition offers flexible VPN technologies for any connectivity scenario, with scalability up to 5000 concurrent users per device. It provides easy-to-manage, full-tunnel network access through SSL, Datagram Transport Layer Security (DTLS), IPsec VPN client technologies, advanced clientless SSL VPN capabilities, and network-aware site-to-site VPN connectivity, enabling secure connections across public networks to mobile users, remote sites, contractors, and business partners. Costs associated with VPN deployment and operations are reduced by eliminating ancillary equipment required to scale and secure a VPN.

Customizable Remote-Access

VPN Features

Find out more about the Cisco VPN client remote-access features by clicking on the links in the table below:

Feature Included
Cisco AnyConnect VPN Client Features
Optimised Network Access
Broad Operating System Support
Deployment and Connection Options
Ease of Client Administration
Consistent User Experience
Advanced IP Network Connectivity
Clientless Network Access
Broad, Reliable Compatibility
Integrated Clientless Application Optimisation
Customisable User Experience
Fully Clientless Citrix Access
Integrated Client/Server Application Support
Support for Common Thick-Client Applications
Broad Browser Support
Advanced IP Network Connectivity
Comprehensive Authentication and Authorisation Choices
Authentication Options
Sophisticated Authorisation
Single Sign On (SSO) for Clientless SSL VPN Users

Threat-Protected VPN Service

The Cisco ASA 5500 Series SSL/IPsec VPN Edition provides advanced security for VPN deployments through its integrated network and endpoint security technologies. Securing the VPN is necessary to ensure it prevents network attacks such as worms, viruses, spyware, keyloggers, Trojan horses, rootkits, or hacking. Detailed application and access control policy helps ensure that individuals and groups of users have access only to the applications and network services to which they are entitled (Figure 2).

Figure 2. Threat-Protected VPN Services Use Onboard Security to Protect Against VPN Threats

Network Security at the VPN Gateway

Worms, viruses, application-embedded attacks, and application abuse are among the greatest security challenges in today's networks. Remote access and remote-office VPN connectivity are common points of entry for such threats due to limited security capabilities on VPN devices. VPNs are often deployed without proper inspection and threat mitigation applied at the tunnel termination point at the headquarters location, which allows malware from remote offices or users to infiltrate the network and spread. With the converged threat mitigation capabilities of the Cisco ASA 5500 Series, customers can detect malware and stop it before it enters the network interior. For application-embedded attacks, such as spyware or adware spread through file-sharing peer-to-peer networks, the Cisco ASA 5500 Series deeply examines application traffic to identify a dangerous payload and drops its contents before it reaches its target and causes damage. The table below lists some VPN gateway security features provided by the Cisco VPN Client.

Feature Included
Network Security at the VPN Gateway
Extensive Malware Mitigation
Aware Firewall and Access Control
Intrusion Prevention
Access Restrictions
Virtual LAN (VLAN) Mapping
Comprehensive Endpoint Security for SSL VPN
Pre-Connection Posture Assessment
Pre-Connection Asset Assessment
Comprehensive Session Protection
End-of-Session Data Cleanup
Keystroke Logger Detection
Available with Guest Permissions
Advanced Endpoint Assessment License
Network-Aware Site-to-Site VPN Features
QoS-Enabled
Network-Aware Routing
VPN Cost-Effectiveness Through Platform Integration
Network and Endpoint Security
Load Balancing

Firewall Network Security

Cisco ASA 5500 Series | Platform Overview

The Cisco ASA 5500 Series delivers site-specific scalability, from small offices to enterprise headquarter locations, through its five models: 5505, 5510, 5520, 5540, and 5550 (Figure 3). Models 5510 and up share a common chassis, built with a foundation of concurrent services scalability, investment protection, and future technology extensibility. The table below lists the specifications of the Cisco ASA 5500 Series models.

Figure 3. The Cisco ASA 5500 Series

Platform Cisco ASA 5505 Cisco ASA 5510 Cisco ASA 5520 Cisco ASA 5540 Cisco ASA 5550
Maximum VPN Throughput 100 Mbps 170 Mbps 225 Mbps 325 Mbps 425 Mbps
Maximum Concurrent SSL VPN Sessions 25 250 750 2500 5000
Maximum Concurrent IPsec VPN Sessions 25 250 750 2500 5000
Interfaces Eight 10/100 copper Ethernet ports with dynamic port grouping. Includes two Power over Ethernet (PoE) ports, three USB ports Five 10/100 copper Ethernet ports, two USB ports Four 10/100/1000 copper Ethernet ports, one out-of-band management port, two USB ports Four 10/100/1000 copper Ethernet ports, one out-of-band management port, two USB ports Eight Gigabit Ethernet ports, four small form factor-pluggable (SFP) fiber ports, one Fast Ethernet port
Profile Desktop 1-RU 1-RU 1-RU 1-RU
Stateful Failover No Licensed feature Yes Yes Yes
VPN load Balancing No Licensed feature Yes Yes Yes

Devices include a license for two SSL VPN users for evaluation and remote management purposes. The total concurrent IPsec and SSL (clientless and tunnel-based) VPN sessions may not exceed the maximum concurrent IPsec session count shown in the chart. The SSL VPN session number may also not exceed the number of licensed sessions on the device. 2Upgrade is available with Cisco ASA 5510 Security Plus license.

Discount Web Hosting

CCS Leeds website hosting service provides secure and reliable web hosting for small business and personal website hosting. Our discount web hosting packages include online support, secure web space and domain management services hosted on secure servers, meaning you will receive a reliable and secure web host with our discount web hosting packages

Read More

Contact us about our firewall network security services

Request a Callback

CCS Leeds offer a range of firewall network security services, including Cisco SSL. To find out more about the services or to get a quote, click the button or call: (0)113 294 66 99.

Protect your business with CCS Leeds Firewall Network Security.