Cisco ASA Next-Generation Firewall Services deliver application, user ID, and device awareness capabilities for
enhanced visibility and control of network traffic. In addition, administrators can:
– Prevent network intrusions based on dynamically calculated business risk
– Restrict web and web application usage based on the reputation of a site with Cisco Web Security
Essentials (WSE)
– Proactively protect against Internet threats through up-to-the-minute reputation analysis and robust contentbased
URL filtering
– Enforce differentiated policies based on the user, device, role, and application type
– Recognize and control more than 1000 applications and 150,000 micro applications with Cisco Application
Visibility and Control (AVC)
The Cisco ASA 5585-X supports two hardware blades in a single 2RU chassis.
Cisco Next-Generation Firewall Services, or a second stateful inspection firewall module. Multiple integrated
security services within a single chassis provide broad deployment flexibility and investment protection. The ability
to add a second stateful inspection firewall module doubles the firewall performance for superior scalability,
performance density, and security for data center use cases. In addition, the top slot can optionally be populated
with up to two Cisco ASA 5585-X I/O Modules for high interface density for mission-critical data centers that require
exceptional flexibility and security.