CISCO ASA 5505 SECURITY PLUS LICENSE LICENSE
CISCO ASA 5505 SECURITY PLUS LICENSE SERIES

Supports 2 Virtual Firewalls (included) and 5 maximum. Supports Active/Active and Active/Standby failover

Supports Stateless Active/Standby failover No High Availability (failover) supported None of that should be affecting your ability to reach your DMZ web server.10 Maximum VPN Sessions (site-to-site and remote access)Дў5 Maximum VPN Sessions (site-to-site and remote access)ДЈ Maximum VLANs (Trunking Disabled)(2 regular zones and 1 restricted zone that can only communicate with 1 other zone)Дў0 Maximum VLANs (Trunking enabled)(No restrictions of traffic flow between zones)

CISCO ASA 5505 SECURITY PLUS LICENSE LICENSE

The Security Plus license enables the 5510 to provide up to 100 VLANs (instead of 50 with the basic license), upgrades two of the interfaces on the back of the device to Gigabit Ethernet (instead of no Gigabit interfaces with the basic license), allows a maximum of 130,000 concurrent firewall connections (instead of 50,000 with the basic license), allows a maximum of five security contexts and allows for VPN clustering and load balancing.

Gander at this article a bit and compare how you have your DMZ built. That's my guess, seeing as though we don't know how your ASA has been configured. If you're NAT/PAT rules and ACLs aren't configured properly, those http requests don't know where to go and will never reach your DMZ web server. How do you have your NAT rules and ACLs configured? Your http requests from outside need to know where to go once they hit your ASA's outside interface. This device also implements URL Filtering, Secure Desktop, IP Auditing, and can use certificates for identification.' This can potentially create problems when trying to implement a demilitarized zone (also known as a DMZ) as will be discussed in a later section. Another way of explaining this restriction is that there are two normal zones and one restricted zone that can only communicate with one of the other zones( 2). However, the base license does allow that particular VLAN to respond to requests. 'A major difference between the two licenses is that the base license does not allow traffic to be forwarded from one VLAN to another this restriction is removed in the security plus license. Unfortunately, neither of the licenses supports intrusion prevention, content security (which includes antivirus, anti spyware, and file blocking), or VPN clustering and load balancing. The security plus license also allows for a maximum of 20 virtual interfaces, commonly referred to as VLANs, with trunking enabled, and the base license supports a maximum of three.

It should be noted that both licenses initially only support two VPN connections( 2). It also supports a maximum of 25 site-to-site and remote access VPN sessions and the base license supports a maximum of 10. For example, it supports up to 25,000 maximum firewall connections whereas the base license only supports a maximum of 10,000. However, the security plus license has additional features. Both offer 150 megabits per second throughput, a maximum of 25 SSL VPN user sessions, and a maximum encrypted VPN throughput of 100 megabits per second. These licenses are the base and the security plus. The 5505 model comes in two separate licenses.

CISCO ASA 5505 SECURITY PLUS LICENSE SERIES

'Overview of Device Features Differences between Base License and Security Plus License The 5500 series comes in a variety of models but we are going to be focusing on the 5505 model, released in 2006.

Cisco asa 5505 security plus license