46
Cisco Securit y Service Modules

Firewall Services Module

This module delivers the fastest firewall data rates in
the industry: 5Gbps throughput, 100,000 CPS, and one
million concurrent connections. Up to four modules
can be installed in a single chassis, offering scalability
to 20Gbps per chassis. Based on Cisco PIX® Firewall
technology, it provides large enterprises and service
providers with unmatched security, reliability,
and performance.
• Allows any port on Cisco Catalyst 6500 to operate as
a firewall port and integrates firewall security inside the
network infrastructure.
• Provides unsurpassed performance to meet future
requirements, scaling to up to 20Gbps per chassis
without requiring a system overhaul.
• Offers the best price/per formance ratio of any firewall,
utilizing the familiar, time-tested Cisco PIX Operating
System to reduce the cost of training, and integrating
firewall services into the chassis to reduce management
requirements.
• An intuitive graphical user interface (GUI) simplifies
management and configuration, and it’s supported
by the Cisco management framework and by Cisco
AVVID partners for configuration and monitoring.
• Virtualized FWSM delivers multiple firewalls on one
physical hardware platform, allowing network
administrators to configure, deploy, and manage
functions as if they were separate devices, while
reducing the cost and complexity of managing
network infrastructure.

SSL Services Module

This module offloads processor-intensive tasks related
to securing traffic with Secure Sockets Layer (SSL),
increases the number of secure connections supported
by a web site, and reduces the operational complexity of
high performance web server farms.
• Ensures high availability when installed in a redundant
Cisco Catalyst 6500 configuration, maintaining SSL
sessions if hardware failures occur.
• Simplifies security management while encrypting
user data to the web servers, providing privacy,
confidentiality, and authentication using a wide range
of certificates, including Netscape and VeriSign.
• An integrated Content Switching Module or external
load-balancing appliance can load balance secure
HTTPS content requests to multiple Cisco SSL services
modules, maximizing SSL termination performance and
providing SSL scalability.
• Provides the best price/performance ratio of any
SSL accelerator on the market. Cost of maintenance
is included in the maintenance contract of the Cisco
Catalyst chassis, providing cost savings on annual
service contracts. And by offloading the processing-
intensive SSL termination burden from the web
servers, the SSL Service Module eliminates the need
to purchase additional servers.

Network Analysis Module

This module provides traffic monitoring services for
visibility into network and application usage, helping
network managers troubleshoot delivery issues,
improve the utilization of network resources, and ease
the deployment of new network services. The NAM is
available in two hardware versions, NAM-1 and NAM-2,
to meet diverse network analysis needs in scalable
switching environments.
• Includes an embedded, web-acc essible Traffic Analyzer
interface that presents both configuration menus and
real-time and historical reports.
• Provides visibility into what applications are
running on the network and how they’re performing,
tracking response times and identifying whether issues
are server- or network-related.
• Offers web-base d captures and decodes for anytime,
anywhere troubleshooting.
• Analyzes the performance of IP-based servic es,
including VoIP, video, and QoS.
continued