Adaptive Security Appliances (ASA) 

تجهیزات امنیتی شرکت سیسکو که با برند سیسکو ASA شناخته می شوند می توانند مجموعه ای منحصر بفرد از ویژگی های امنیتی را برای سازمان هایی با مقیاس كوچك ، بزرگ و گسترده و همچنین مراکز داده معرفی نماید. (ASAv (Adaptive Security Virtual Appliance به عنوان یک ماشین مجازی بر روی Hypervisor شبکه مجازی اجرا می شود. اکثر قابلیت هایی که در دستگاه ASA توسط نرم افزار سیسکو پشتیبانی می شود بر روی ماشین مجازی هم به خوبی کار می کند فقط دو ویژگی Clustering و Multiple context توسط ASAv سیسکو پشتیبانی نمی شود. ASAv سیسکو از سرویس های امن مانند ارتباط VP-N Site-to-Site، دسترسی Remote و کابرد های غیر کلاینتی VPN پشتیبانی می کند.

Today, businesses rely on a mixture of physical and virtual solutions to meet their network security needs. They need the flexibility to deploy different physical and virtual firewalls across a wide range of environments while still maintaining consistent policy throughout branch offices, corporate data centers, and all entry points between. From data center consolidation to office relocations, M&A scenarios, or seasonal peaks in demand on your applications—Cisco’s virtual firewall portfolio helps businesses simplify security management with the convenience of unified policy and the flexibility to deploy everywhere.

With the Cisco^® Adaptive Security Virtual Appliance (ASAv), you have the flexibility to choose the performance you need for your business. ASAv is the virtualized option of our popular ASA solution and offers security in traditional physical data centers and private and public clouds. Its scalable VPN capability provides access for employees, partners, and suppliers—and protects your workloads against increasingly complex threats with world-class security controls.

Product overview

The ASAv is a firewall with powerful VPN capabilities. It supports site-to-site VPN, remote-access VPN, and clientless VPN functionalities. Consistent policy simplifies management across your virtual and physical ASAs. Cisco Smart Software Licensing makes it easy to deploy, manage, and track virtual instances of the appliance running in your private cloud or in a public cloud.

Benefits

VPN head-end

Cisco AnyConnect^® client empowers employees to work from home (or anywhere) on any device at any time, securely. Give any user highly secure access to your enterprise network and provide visibility and control to your IT and security teams to identify who and which devices are accessing the infrastructure. Alleviate strain on your IT and security teams as they support offsite workers and personal devices. ASAv supports site-to-site VPN for connecting your data centers.

License portability across clouds

Deploy ASAv everywhere—from your corporate data center to your branch office, to a public cloud—with the portability of one license across public or private clouds (VMware, KVM and Hyper-V, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI) and government clouds). Expand, contract, or relocate workloads over time and span private and public cloud infrastructures with one license.

Low-touch deployment

Rapidly deploy additional ASAvs to support unplanned or seasonal surges on your applications or VPN. Add more bandwidth or protection for remote offices by spinning up a new VM. Choose from higher-performance model options if you need more protection.

Smart Software Licensing

Cisco Smart Software Licensing makes it easier to buy, deploy, track, and renew Cisco licenses. We have moved away from Product Activation Key (PAK)-based licensing to a model that supports more flexibility and visibility. You will enjoy:

●      Simpler purchase and activation of the virtual appliance

●      Easier license management and reporting of virtual appliances due to license pooling

●      Automatic license activation when the virtual appliance is provisioned

Customers, select partners, and Cisco can view product entitlements and services in the Cisco Smart Software Manager. Configuration and activation are done with a single token. The ASAv will self-register with a Cisco server in the cloud, eliminating the need to register products with PAKs. Instead of using PAKs or license files, Smart Software Licensing establishes a pool of software licenses or entitlements that can be used across your business. When a virtual appliance is instantiated on a customer’s premises, an entitlement is subtracted from the pool. When a virtual appliance is decommissioned, or when it is deinstantiated within the Smart Software Manager, an entitlement is added to the pool.

With the Smart Software Manager, you can manage license deployments throughout your organization easily and quickly. You can also manage multiple products from Cisco that support Smart Software Licensing.

The ASAv uses Smart Software Licensing exclusively. Older forms of licensing are not supported.

Any ASAv license can be used on any supported ASAv vCPU/memory configuration. This allows ASAv customers to run on a wide variety of VM resource footprints. This also increases the number of supported AWS, Azure, GCP and OCI instances types. When configuring the ASAv VM, the maximum supported number of vCPUs is 16 and the maximum supported memory is 128GB RAM.

Table 1.        Specifications for 9.14.1.6 and later- ESXi/KVM

Note:     This data is from testing on the Cisco Unified Computing System^™ (Cisco UCS^®) C series M5 server with the Intel^® Xeon^® Gold 6254 processors running SR-IOV on Intel X520/X710. Stated virtual CPU core allocation assumes dedicated physical cores with Hyper Threading disabled. Each performance number above was obtained while running only the associated test.

Table 2.        Specifications for 9.15 and later- AWS

Table 3.        Specifications for 9.15 and later- Azure

Table 4.        Specifications for 9.15 and later- GCP

Table 5.        Specifications for 9.15 and later- OCI

Table 6.        ASAv models and recommended public cloud instance types

Table 7.        Hypervisor and public cloud constraints

Table 8.        Maximum Cisco AnyConnect user sessions

Table 9.        AWS instance support

Table 10.     Azure instance support

Table 11.     GCP instance support^*

Table 12.     OCI instance support^*

Table 13.     Ordering information: In Cisco Commerce Workspace (CCW) order the base selection (denoted by “K9” in the part number), followed by the desired license type