This device also implements URL Filtering, Secure Desktop, IP Auditing, and can use certificates for identification.' This can potentially create problems when trying to implement a demilitarized zone (also known as a DMZ) as will be discussed in a later section. Another way of explaining this restriction is that there are two normal zones and one restricted zone that can only communicate with one of the other zones( 2).

However, the base license does allow that particular VLAN to respond to requests. 'A major difference between the two licenses is that the base license does not allow traffic to be forwarded from one VLAN to another this restriction is removed in the security plus license. Unfortunately, neither of the licenses supports intrusion prevention, content security (which includes antivirus, anti spyware, and file blocking), or VPN clustering and load balancing. The security plus license also allows for a maximum of 20 virtual interfaces, commonly referred to as VLANs, with trunking enabled, and the base license supports a maximum of three. It should be noted that both licenses initially only support two VPN connections( 2). It also supports a maximum of 25 site-to-site and remote access VPN sessions and the base license supports a maximum of 10. For example, it supports up to 25,000 maximum firewall connections whereas the base license only supports a maximum of 10,000.

However, the security plus license has additional features. Both offer 150 megabits per second throughput, a maximum of 25 SSL VPN user sessions, and a maximum encrypted VPN throughput of 100 megabits per second. These licenses are the base and the security plus. The 5505 model comes in two separate licenses. 'Overview of Device Features Differences between Base License and Security Plus License The 5500 series comes in a variety of models but we are going to be focusing on the 5505 model, released in 2006.

Cisco asa 5505 security plus license