Cisco PIX Firewall Models and Features
Cisco has named its family of security firewalls Security Appliances, encompassing both the
PIX and ASA Security Appliances. Currently, six models of the Cisco PIX Firewall are
available. Additionally, three models have been introduced in the new series of ASA Security
Appliances. All these models provide services for users ranging from the small office/home
office (SOHO) to the enterprise network and Internet service provider (ISP):
■ Cisco Secure PIX 501—Intended for SOHO use and incorporates an integrated 10/100
Ethernet switch.
■ Cisco Secure PIX 506E—Intended for remote office/branch office (ROBO) use and
comes with two 10/100 Ethernet interfaces.
■ Cisco Secure PIX 515E—Designed for small to medium-size businesses and branch office
installations.
■ Cisco Secure PIX 525—Intended for large enterprise networks and ISPs.
■ Cisco Secure PIX 535—Intended for very large enterprise networks and ISPs. This model
is the most robust of the PIX Firewall series.
■ Cisco ASA Security Appliance 5510—Intended for small-to-medium businesses and
enterprise installations.
■ Cisco ASA Security Appliance 5520—Intended for small-to-medium-size business
installations, as well as several large enterprise networks. The 5520 includes four gigabit
Ethernet ports.
■ Cisco ASA Security Appliance 5540—Intended for large enterprise networks and ISPs.
This is the largest and most robust of the Cisco ASA models.
■ Cisco Firewall Service Module (FWSM)—Designed for large enterprise networks and
ISPs. The FWSM is a PIX Firewall blade for the Cisco Catalyst 6500 Series switches and
7600 Series routers.
All Cisco Security Appliances running software version 7.0 or later have the functionality
described in the following sections incorporated into their design.