Firewall Features
Support for Layer 3 and Layer 4 stateful firewall inspection features, including access control and network address translation, enables organizations to keep existing stateful inspection policies that are essential for compliance regulations. The context-aware Cisco Intrusion Prevention System (IPS) services provide the capability to act more intelligently and aggressively against threats that pose a significant risk to organizations.

In addition to comprehensive stateful inspection capabilities, Layer 7 next-generation policies act intelligently on contextual information. Cisco AnyConnect? technology provides information on the type and location of a mobile device before it accesses the network, so that administrators can maintain high levels of network protection and control. Threat intelligence feeds from Cisco Collective Security Intelligence (CSI) use the global footprint of Cisco security deployments to analyze approximately one-third of the world?s Internet traffic for near-real-time protection from zero-day threats.

Flexible Deployment Options
The Cisco ASA 5585-X supports two hardware blades in a single 2RU chassis. The bottom slot (slot 0) hosts the ASA stateful inspection firewall module, while the top slot (slot 1) can be used for adding a dedicated Cisco IPS, Cisco ASA with FirePOWER Services, or a second stateful inspection firewall module. Multiple integrated security services within a single chassis provide broad deployment flexibility and investment protection. The ability to add a second stateful inspection firewall module doubles the firewall performance for superior scalability, performance density, and security for data center use cases. In addition, the top slot can optionally be populated with up to two Cisco ASA 5585-X I/O modules for high interface density for mission-critical data centers that require exceptional flexibility and security.