Home

Cisco ASA5550-DC-K8 firewall (hardware)

1. Product Name Part Number Product Description Encryption Classification Cisco ASA 5500 Series ASA5500 ENCR K8 Cisco ASA 5500 Base Encryption Unrestricted Platform Encryption License with DES License ASA5500 ENCR K9_ Cisco ASA 5500 Strong Encryption Restricted License with 3DES AES Q Cana Cisco ASA 5500 Series Edition bundle that is unrestricted K8 bundle with base encryption be upgraded to support strong encryption K9 bundle A Yes A bundle with base encryption can be upgraded to support strong 3DES AES encryption at http Awww cisco com go license This upgrade is available to customers at zero cost Q How can a K9 part number be a subcomponent of a K8 bundle that is unrestricted A Fora K9 part number to be a subcomponent of a K8 bundle it has to be classified as unrestricted encryption For instance Cisco ASA 5500 Series Security Services Modules listed in Table 5 are K9 designated and have unrestricted encryption designation This enables the modules to be subcomponents of Cisco ASA 5500 Series Edition bundles with K8 designators Other examples include Cisco SSL VPN Client and Cisco Secure Desktop software listed in Table 6 Q What does it mean for an order to be on an export hold gt An order can be on an export hold if one or more of the following is true e The order contains restricted encryption products e The end user is in embargoed restricted territory e A party to the transaction is an entit
2. Cisco ASA 5505 Unlimited User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5505 SEC BUN K8 Cisco ASA 5505 Unlimited User Security Plus Bundle includes 8 port Fast Ethernet switch 25 IPsec VPN peers 2 SSL VPN peers DMZ stateless Active Standby high availability DES license Unrestricted ASA5505 SSL10 K8 Cisco ASA 5505 SSL IPsec VPN Edition includes 10 IPsec VPN peers 10 SSL VPN peers 50 firewall users 8 port Fast Ethernet switch DES license Unrestricted ASA5505 SSL25 K8 Cisco ASA 5505 SSL IPsec VPN Edition includes 10 IPsec VPN peers 25 SSL VPN peers 50 firewall users 8 port Fast Ethernet switch Security Plus license DES license Unrestricted ASA5505 SEC NFR K8 Cisco ASA 5505 Not for Resale Bundle includes 50 firewall users Security Plus License 8 port Fast Ethernet switch 25 IPsec VPN peers 2 SSL VPN peers DMZ stateless Active Standby high availability DES license Unrestricted ASA5505 BUN K9 Cisco ASA 5505 10 User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2 SSL VPN peers 3DES AES license Restricted ASA5505 50 BUN K9 Cisco ASA 5505 50 User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2 SSL VPN peers 3DES AES license Restricted ASA5505 UL BUN K9 Cisco ASA 5505 Unlimited User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2
3. StackWise The Fastest Way to Increase Your Internet Quotient and TransPath are registered trademarks of Cisco Systems Inc and or its affiliates in the United States and certain other countries All other trademarks mentioned in this document or Website are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company 0609R Printed in USA C78 384608 00 12 06 All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 11 of 11
4. 1 Fast Ethernet interface 750 IPsec VPN peers 2 SSL VPN peers Active Active and Active Standby high availability DES license Unrestricted ASA5520 DC K8 Cisco ASA 5520 Firewall Edition with DC power supply includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 750 IPsec VPN peers 2 SSL VPN peers Active Active and Active Standby high availability DES license Unrestricted All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 7 of 11 Export Compliance Guide and Q amp A ES ASA5520 AIP10 K8 Cisco ASA 5520 IPS Edition includes AIP SSM 10 firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface DES license Unrestricted ASA5520 AIP20 K8 Cisco ASA 5520 IPS Edition includes AIP SSM 20 firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface DES license Unrestricted ASA5520 CSC20 K8 Cisco ASA 5520 Anti X Edition includes CSC SSM 20 500 user antivirus anti spyware with 1 year subscription firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface DES license Unrestricted ASA5520 NFR K8 Cisco ASA 5520 Firewall Edition Not for Resale Bundle includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 750 IPs
5. 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 CSC NFR K9 Cisco ASA 5520 Anti X Edition Not for Resale Bundle includes CSC SSM 20 500 user antivirus anti spyware with 1 year subscription firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 SSL500 K9 Cisco ASA 5520 SSL IPsec VPN Edition includes 750 IPsec VPN peers 500 SSL VPN peers firewall services 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted Cisco ASA 5540 Series ASA5540 K8 Cisco ASA 5540 Firewall Edition includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 5000 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5540 DC K8 Cisco ASA 5540 Firewall Edition with DC power supply includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 5000 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5540 AIP20 K8 Cisco ASA 5540 IPS Edition includes AIP SSM 20 firewall services 5000 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface DES license Unrestricted All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 8 of 11 Export Complia
6. Advanced Encryption Standard AES or Triple Data Encryption Standard 8DES and are considered network infrastructure commodities under the U S Export Administration Regulations Restricted encryption products are not eligible for export to government or military end users in some countries without an export license To determine what end users require an export license for restricted encryption products visit http www cisco com wwl export crypto tool stqrg html Q What is 7res credencryption A Unrestricted encryption products also have symmetric key lengths greater than 64 bits but they do not meet the network infrastructure criteria of restricted products under the U S Export Regulations Government and military end users that are not eligible for restricted encryption without a license may be eligible for unrestricted Cisco ASA 5500 Series products To determine what end users are eligible for unrestricted encryption products visit http www cisco com wwl export crypto tool stgrg html For more information please refer to the U S Export Administration Regulations http Awww access gpo gov bis ear ear_data html Q What encryption levels does the Cisco ASA 5500 Series support A Cisco ASA 5500 Series supports two different levels of encryption By default all Cisco ASA 5500 Series appliances support 56 bit DES 56 bit RC4 512 bit RSA and 512 bit Digital Signature Algorithm DSA encryption algorithms included in
7. Services Module 10 with 50 user antivirus anti spyware 1 year subscription Unrestricted ASA CSC 10 INC K9 Cisco ASA Content Security and Control Security Services Module 10 included in Cisco ASA 5500 Series Anti X Edition Bundles Unrestricted ASA SSM CSC 20 K9 Cisco ASA Content Security and Control Security Services Module 20 with 500 user antivirus anti spyware 1 year subscription Unrestricted All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 9 of 11 Export Compliance Guide and Q amp A en EY ASA CSC 20 INC K9 Cisco ASA Content Security and Control Security Unrestricted Services Module 20 included in Cisco ASA 5500 Series Anti X Edition Bundles ASA CSC 10 NFR K9 Cisco ASA Content Security and Control Security Unrestricted Services Module 10 with 50 user antivirus anti spyware 1 year subscription ASA CSC 20 NFR K9 Cisco ASA Content Security and Control Security Unrestricted Services Module 20 with 500 user antivirus anti spyware 1 year subscription Table 6 Export Classification for Cisco ASA 5500 Series Software Product Name Part Number Product Description U S Export Classification Cisco ASA 5500 SF ASA 7 0 K8 Cisco ASA 5500 Series Software v7 0 for Cisco ASA Unrestricted Series Software 5510 5520 5540 and 5550 Adaptive Secu
8. license reporting and distribution stocking requirements for each of the encryption categories Table 1 Export License Requirements for Encryption Classifications End User Unrestricted Restricted Sanctioned entities DPL No sale No sale Government and military Export license not required License and written assurance EPCI required for restricted users except for those in exempted countries Others not sanctioned Export license not required License and written assurance EPCI required for entities government restricted users except for those in exempted countries or military Reporting Yes Done by Cisco Export team Yes Done by Cisco Export team 2 Tier stocking Yes Limited For distributors not located in exempted countries stocking is limited to 5 units for emergency replacement End user information is required at the time of order entry Report first tier of distribution and or end user details including name address date product description and quantity Q What are the exempted countries also known as ENC Country Group A The exempted countries or exempt government entities are listed here http www cisco com wwl export crypto tool stgrg html Q How do purchase an unrestricted Cisco ASA 5500 Series product A To purchase any unrestricted product as long as you do not fall under Sanctioned Entities Embargoed Territories Restricted End Users or Enterprises under thei
9. the base encryption license Customers can optionally upgrade to a strong encryption license that adds support for 168 bit 3DES up to 256 bit AES up to 128 bit RC4 up to 4096 bit RSA and up to 1024 bit DSA encryption algorithms A strong encryption license can be obtained through Cisco com if it All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 2 of 11 Export Compliance Guide and Q amp A oT was not ordered with the appliance originally The product part numbers for the base and strong encryption licenses are listed in Table 3 Q Which Cisco ASA 5500 Series products are classified as unrestricted or restricted The Cisco ASA 5500 Series product family does not include any products that are classified as mass market The product family however includes products that are classified as gt unrestricted or restricted These are listed in the following tables e Table 4 lists encryption classifications for Cisco ASA 5500 Series Edition bundles e Table 5 lists encryption classifications for Cisco ASA 5500 Series Security Services Modules e Table 6 lists encryption classifications for Cisco ASA 5500 Series software e Table 7 lists encryption classifications for Cisco ASA 5500 Series applications Q What are the license reporting and distribution stocking requirements for products with unrestricted and restricted encryption A Table 1 summarizes the
10. 0 Anti X Edition includes CSC SSM 10 50 user antivirus anti spyware with 1 year subscription firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces DES license Unrestricted ASA5510 SEC NFR K8 Cisco ASA 5510 Firewall Edition Not for Resale Bundle includes Security Plus License 5 Fast Ethernet interfaces 250 IPsec VPN peers 2 SSL VPN peers Active Standby high availability DES license Unrestricted ASA5510 BUN K9 Cisco ASA 5510 Firewall Edition includes 5 Fast Ethernet interfaces 250 IPsec VPN peers 2 SSL VPN peers 3DES AES license Restricted ASA5510 SEC BUN K9 Cisco ASA 5510 Security Plus Firewall Edition includes 5 Fast Ethernet interfaces 250 IPsec VPN peers 2 SSL VPN peers Active Standby high availability 3DES AES license Restricted ASA5510 AIP10 DCK9 Cisco ASA 5510 IPS Edition with DC power supply includes AIP SSM 10 firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 AIP10 K9 Cisco ASA 5510 IPS Edition includes AIP SSM 10 firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 CSC10 K9 Cisco ASA 5510 Anti X Edition includes CSC SSM 10 50 user antivirus anti spyware with 1 year subscription firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Res
11. Afeafe CISCO Export Compliance Guide and Q amp A Export Compliance Guide for Cisco ASA 5500 Series Adaptive Security Appliances Cisco ASA 5500 Series adaptive security appliances are purpose built solutions that combine best in class security and VPN services with an innovative extensible services architecture Designed as a core component of the Cisco Self Defending Network the Cisco ASA 5500 Series provides proactive threat defense that stops attacks before they spread through the network controls network activity and application traffic and delivers flexible VPN connectivity The result is a powerful multifunction network security appliance family that provides the security breadth and depth for protecting home office branch office small and medium sized business and enterprise networks while reducing the overall deployment and operations costs and complexities associated with providing this new level of security This Cisco ASA 5500 Series export compliance guide outlines the export classifications for products that belong to the Cisco ASA 5500 Series product family in accordance with U S Department of Commerce Export Administration Regulations This is accomplished through the following series of questions and answers Figure 1 Cisco ASA 5500 Series Adaptive Security Appliances The key export related questions answered in this guide are e Which Cisco ASA 5500 Series products are classified as unrestricted or restricted e
12. SSL VPN peers 3DES AES license Restricted ASA5505 SEC BUN K9 Cisco ASA 5505 Unlimited User Security Plus Bundle includes 8 port Fast Ethernet switch 25 IPsec VPN peers 2 SSL VPN peers DMZ stateless Active Standby high availability 3DES AES license Restricted ASA5505 SSL10 K9 Cisco ASA 5505 SSL IPsec VPN Edition includes 10 IPsec VPN peers 10 SSL VPN peers 50 firewall users 8 port Fast Ethernet switch 3DES AES license Restricted ASA5505 SSL25 K9 Cisco ASA 5505 SSL IPsec VPN Edition includes 10 IPsec VPN peers 25 SSL VPN peers 50 firewall users 8 port Fast Ethernet switch Security Plus License 3DES AES license Restricted Cisco ASA 5510 Series ASA5510 K8 Cisco ASA 5510 Firewall Edition includes 5 Fast Ethernet interfaces 250 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5510 DC K8 Cisco ASA 5510 Firewall Edition with DC power supply includes 5 Fast Ethernet interfaces 250 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5510 AIP10 K8 Cisco ASA 5510 IPS Edition includes AIP SSM 10 firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces DES license Unrestricted All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 6 of 11 Export Compliance Guide and Q amp A aT ASA5510 CSC10 K8 Cisco ASA 551
13. What are the license reporting and distribution stocking requirements for products with unrestricted and restricted encryption How to purchase an unrestricted or restricted Cisco ASA 5500 Series product What makes a Cisco ASA 5500 Series Edition bundle an unrestricted or restricted bundle What does it mean for an order to be on export hold Q What is an export A An export is the transfer of products software or technology to persons or territories via verbal physical or electronic means Q How are end users and destinations categorized with respect to export control A End users fall into three categories sanctioned entities government and military and others No sale is allowed to sanctioned entities listed on the U S Denied Party List DPL Government and military may require a license for certain product categories in non exempted countries A list of exempted countries is available on the Cisco Regulatory Affairs Website No license is required by entities in the others category Q What is a sanctioned entity All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 1 of 11 Export Compliance Guide and Q amp A aT A A sanctioned entity is an individual and or entity that has been denied export privileges because they have willfully violated international treaties and local laws Q How do we find out if a customer is sanctioned A T
14. ec VPN peers 2 SSL VPN peers Active Active and Active Standby high availability DES license Unrestricted ASA5520 BUN K9 Cisco ASA 5520 Firewall Edition includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 750 IPsec VPN peers 2 SSL VPN peers Active Active and Active Standby high availability 3DES AES license Restricted ASA5520 AIP10 K9 Cisco ASA 5520 IPS Edition includes AIP SSM 10 firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 AIP20 K9 Cisco ASA 5520 IPS Edition includes AIP SSM 20 firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 AIP NFR K9 Cisco ASA 5520 IPS Edition Not for Resale Bundle includes AIP SSM 10 firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 CSC10 K9 Cisco ASA 5520 Anti X Edition includes CSC SSM 10 50 user antivirus anti spyware with 1 year subscription firewall services 750 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5520 CSC20 K9 Cisco ASA 5520 Anti X Edition includes CSC SSM 20 500 user antivirus anti spyware with 1 year subscription firewall services
15. hernet interface 4 Gigabit SFP interfaces 5000 IPsec VPN peers 2 SSL VPN peers 3DES AES license Restricted ASA5550 SSL2500 K9 Cisco ASA 5550 SSL IPsec VPN Edition includes 5000 IPsec VPN peers 2500 SSL VPN peers firewall services 8 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5550 SSL5000 K9 Cisco ASA 5550 SSL IPsec VPN Edition includes 5000 IPsec VPN peers 5000 SSL VPN peers firewall services 8 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted Table 5 Export Classification of Cisco ASA 5500 Security Services Modules Product Name Part Number Product Description U S Export Classification Cisco ASA 5500 Series AIP SSM ASA SSM AIP 10 K9 Cisco ASA Advanced Inspection and Prevention Security Services Module 10 Unrestricted ASA AIP 10 INC K9 Cisco ASA Advanced Inspection and Prevention Security Services Module 10 included in Cisco ASA 5500 Series IPS Edition Bundles Unrestricted ASA SSM AIP 20 K9 Cisco ASA Advanced Inspection and Prevention Security Services Module 20 Unrestricted ASA AIP 20 INC K9 Cisco ASA Advanced Inspection and Prevention Security Services Module 10 included in Cisco ASA 5500 Series IPS Edition Bundles Unrestricted Cisco ASA 5500 Series CSC SSM ASA SSM CSC 10 K9 Cisco ASA Content Security and Control Security
16. ion Sales Tool Quick Reference Guide http www cisco com wwl export crypto tool stqrg html e Cisco Compliance and Regulatory Affairs http www cisco com wwl export compliance_provision html e Cisco Export License Form http Awww cisco com wwl export forms form_license html e Cisco Written Assurance Form http www cisco com wwl export forms form_wa_encryption html e Cisco EPCI Assurance Form http Awww cisco com wwl export forms form_wa html All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 10 of 11 Export Compliance Guide and Q amp A aT e U S Department of Commerce Export Compliance and Enforcement http www bis doc gov ComplianceAndEnforcement index htm Note This document is current as of December 2006 Products may be subject to change over time All trade information is provided AS IS and is subject to change without notice Cisco makes no representation or warranty as to the accuracy or reliability of such classifications groups or symbols Any use of such classifications groups or symbols by you is without recourse to Cisco and is to your own risk Cisco is in no way responsible for any damages whether direct consequential incidental or otherwise suffered by you as a result of using or relying upon such classifications groups or symbols for any purpose whatsoever Americas Headquarters Asia Pacific Headquarters Eu
17. nce Guide and Q amp A aT ASA5540 BUN K9 Cisco ASA 5540 Firewall Edition includes 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 5000 IPsec VPN peers 2 SSL VPN peers 3DES AES license Restricted ASA5540 AIP20 K9 Cisco ASA 5540 IPS Edition includes AIP SSM 20 firewall services 5000 IPsec VPN peers 2 SSL VPN peers 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5540 SSL1000 K9 Cisco ASA 5540 SSL IPsec VPN Edition includes 5000 IPsec VPN peers 1000 SSL VPN peers firewall services 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted ASA5540 SSL2500 K9 Cisco ASA 5540 SSL IPsec VPN Edition includes 5000 IPsec VPN peers 2500 SSL VPN peers firewall services 4 Gigabit Ethernet interfaces 1 Fast Ethernet interface 3DES AES license Restricted Cisco ASA 5550 Series ASA5550 K8 Cisco ASA 5550 Firewall Edition includes 8 Gigabit Ethernet interfaces 1 Fast Ethernet interface 4 Gigabit SFP interfaces 5000 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5550 DC K8 Cisco ASA 5550 Firewall Edition with DC power supply includes 8 Gigabit Ethernet interfaces 1 Fast Ethernet interface 4 Gigabit SFP interfaces 5000 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5550 BUN K9 Cisco ASA 5550 Firewall Edition includes 8 Gigabit Ethernet interfaces 1 Fast Et
18. o find out if a customer is sanctioned refer to the DPL at Cisco Regulatory Affairs http www cisco com wwl export compliance_provision html More information is also available at the U S Department of Commerce http www bis doc gov Q What is a government end user gt A government end user is any foreign central regional or local government department agency or other entity performing governmental functions This includes governmental research institutions governmental corporations or their separate business units that are engaged in the manufacture or distribution of items or services controlled on the Wassenaar Munitions List and international governmental organizations Certain state owned enterprises qualify under license exception and as such are not subject to license requirements Q Which destinations are embargoed or prohibited to receive Cisco products technology or services exported from the United States A For alist of embargoed or prohibited export destinations refer to the Regulatory Affairs Website at http Awww cisco com wwl export compliance_provision html Q How are Cisco ASA 5500 Series products categorized with respect to export control A Cisco ASA 5500 Series products fall into one of two encryption categories unrestricted retail or restricted non retail encryption Q What is 7es credencryption A Restricted encryption products have symmetric key lengths greater than 64 bits such as
19. r Control Ownership simply follow normal ordering procedure No export license is required on a per sales order basis for sales of unrestricted products Contact Cisco Export Compliance amp Regulatory Affairs for additional guidance Note All orders are screened against several export compliance lists and license determination at the time of order entry All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 3 of 11 Export Compliance Guide and Q amp A aT Q How do purchase a restricted Cisco ASA 5500 Series product A To purchase any restricted product follow the restricted product export eligibility guidelines This includes no end use by e Government see exempt government entities e Sanctioned entities restricted end users or enterprises under their control ownership e Telcos ISPs may not provide cryptographic services to governments See exempt government entities Also required is written assurance that acknowledges the end user s compliance with published restrictions for all restricted product orders Licenses are required for restricted products going to restricted countries uses and users Visit the Cisco Encryption Sales Tool Quick Reference Guide for additional details on these guidelines or contact Cisco Export Compliance amp Regulatory Affairs with questions Q What is a written assurance A Written assurances must be completed by
20. rity Appliances SF ASA 7 1 K8 Cisco ASA 5500 Series Software v7 1 for Cisco ASA Unrestricted 5510 5520 5540 and 5550 Adaptive Security Appliances SF ASA 7 2 K8 Cisco ASA 5500 Series Software v7 2 for Cisco ASA Unrestricted 5510 5520 5540 and 5550 Adaptive Security Appliances SF ASA5505 7 2 K8 Cisco ASA 5500 Series Software v7 2 for Cisco ASA Unrestricted 5505 Adaptive Security Appliance Cisco ASA 5500 SF ASA AIP 5 1 K9 Cisco ASA 5500 Series Advance Inspection and Unrestricted Series IPS Software Prevention AIP Software 5 1 for Security Service Modules Cisco ASA 5500 SF ASA CSC 6 1 K9 Cisco ASA 5500 Series Content Security and Control Unrestricted Series Anti X CSC Software 6 1 for Security Service Modules Software Cisco Security ASA5500 SW CSD kK9 Cisco Secure Desktop Software included in all Cisco Unrestricted Desktop Software ASA 5500 Series bundles Cisco SSL VPN ASA5500 SW SVC K9 Cisco SSL VPN Client Software included in all Cisco Unrestricted Client Software ASA 5500 Series bundles Table 7 Export Classification for Cisco ASA 5500 Series Applications Product Name Part Number Product Description U S Export Classification Cisco VPN Client ASA VPN CLNT K9 Cisco IPsec VPN Client Software for Windows Solaris Linux or Apple Macintosh Unrestricted For More Information For more information please visit the following Websites e Cisco ASA 5500 Series http www cisco com go asa e Cisco Encrypt
21. rope Headquarters Cisco Systems Inc Cisco Systems Inc Cisco Systems International BV 170 West Tasman Drive 168 Robinson Road Haarlerbergpark a a San Jose CA 95134 1706 28 01 Capital Tower Haarlerbergweg 13 19 USA Singapore 068912 1101 CH Amsterdam C I S Cc oO Www cisco com www cisco com The Netherlands Tel 408 526 4000 Tel 65 6317 7777 www europe cisco com 800 553 NETS 6387 Fax 65 6317 7799 Tel 31 0 800 020 0791 Fax 408 527 0883 Fax 31 0 20 357 1100 Cisco has more than 200 offices worldwide Addresses phone numbers and fax numbers are listed on the Cisco Website at www cisco com go offices 2006 Cisco Systems Inc All rights reserved CCVP the Cisco logo and the Cisco Square Bridge logo are trademarks of Cisco Systems Inc Changing the Way We Work Live Play and Learn is a service mark of Cisco Systems Inc and Access Registrar Aironet BPX Catalyst CCDA CCDP CCIE CCIP CCNA CCNP CCSP Cisco the Cisco Certified Internetwork Expert logo Cisco IOS Cisco Press Cisco Systems Cisco Systems Capital the Cisco Systems logo Cisco Unity Enterprise Solver EtherChannel EtherFast EtherSwitch Fast Step Follow Me Browsing FormShare GigaDrive GigaStack HomeLink Internet Quotient IOS IP TV iQ Expertise the iQ logo iQ Net Readiness Scorecard iQuick Study LightStream Linksys MeetingPlace MGX Networking Academy Network Registrar Packet PIX ProConnect RateMUX ScriptShare SlideCast SMARTnet
22. the end user of restricted commodities Valid e mail and contact information is required This form records a customer s acknowledgement of their responsibility and ability to comply with international laws pertaining to sanctioned uses users and territories Cisco Regulatory Affairs retains the authority to require written assurances The data submitted is reviewed for integrity may be presented to the U S government and is archived for 10 years Q What is Enhanced Proliferation Control Initiative EPCI assurance A Enhanced Proliferation Control Initiative requires that exporters do not participate in the proliferation of weapons or weapons systems or in the design or development of weapons of mass destruction Export may not proceed When the exporter knows that the export will be used in the design development production or stockpiling of missiles or chemical or biological weapons or when the exporter is informed by the U S Department of Commerce that there is a serious risk of diversion an EPCI written assurance is required to ensure compliance with this regulation An export license may also be required Q What do K8 and K9 designators refer to in Cisco product part numbers In general the K8 and K9 designators in Cisco product part numbers refer to unrestricted and gt restricted encryption respectively Table 2 These designators have been defined by Cisco to be used in product part numbers of products that support encr
23. tricted ASA5510 CSC20 K9 Cisco ASA 5510 Anti X Edition includes CSC SSM 20 500 user antivirus anti spyware with 1 year subscription firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 SSL50 K9 Cisco ASA 5510 SSL IPsec VPN Edition includes 250 IPsec VPN peers 50 SSL VPN peers firewall services 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 SSL100 K9 Cisco ASA 5510 SSL IPsec VPN Edition includes 250 IPsec VPN peers 100 SSL VPN 100 peers firewall services 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 SSL250 K9 Cisco ASA 5510 SSL IPsec VPN Edition includes 250 IPsec VPN peers 250 SSL VPN peers firewall services 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 AIP NFR K9 Cisco ASA 5510 IPS Edition Not for Resale Bundle with Security Plus License includes AIP SSM 10 firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Restricted ASA5510 CSC NFR K9 Cisco ASA 5510 Anti X Edition Not for Resale Bundle includes CSC SSM 10 50 user antivirus anti spyware with 1 year subscription firewall services 250 IPsec VPN peers 2 SSL VPN peers 5 Fast Ethernet interfaces 3DES AES license Restricted Cisco ASA 5520 Series ASA5520 K8 Cisco ASA 5520 Firewall Edition includes 4 Gigabit Ethernet interfaces
24. y on the U S government s Denied Parties List Restricted encryption products are systemically placed on export hold at order entry regardless of destination including the U S and Canada All orders are screened against the U S government s Denied Parties List Each transaction is screened to ensure compliance with U S and local export requirements All line items in orders destined for embargoed territories sanctioned entities or end users that pose proliferation concern are placed on export hold Q What are the export requirements that an order must comply with before being released from export hold A The export requirements that an order must comply with before being released from export hold are outlined on the Cisco Regulatory Affairs Website All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 5 of 11 Table 4 Export Compliance Guide and Q amp A o O Export Classification of Cisco ASA 5500 Series Bundles Product Name Part Number Product Description U S Export Classification Cisco ASA 5505 Series ASA5505 K8 Cisco ASA 5505 10 User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5505 50 BUN K8 Cisco ASA 5505 50 User Bundle includes 8 port Fast Ethernet switch 10 IPsec VPN peers 2 SSL VPN peers DES license Unrestricted ASA5505 UL BUN K8
25. yption Table 2 Cisco Encryption Designators for U S Export Regulation Encryption Classification Cisco Encryption Mass Market Unrestricted Restricted Designator K8 By general definition By general definition Not applicable K9 Products that use encryption Products that use encryption By general definition solely for securing network solely for securing network management data management data All contents are Copyright 1992 2006 Cisco Systems Inc All rights reserved This document is Cisco Public Information Page 4 of 11 Export Compliance Guide and Q amp A aT Q What makes a Cisco ASA 5500 Series Edition bundle a restricted or unrestricted bundle A All Cisco ASA 5500 Series Edition bundles that ship with the base encryption license are unrestricted and have a K8 in their product part number Similarly Cisco ASA 5500 Series Edition bundles that ship with the strong encryption license are restricted and have a KQ in their product part number Q Can a product with strong encryption and a K9 part number be unrestricted A Yes As shown in Table 2 if a product uses strong encryption solely for securing network management data it can be classified as unrestricted encryption with a K9 part number The product part numbers for the base and strong encryption licenses are listed in Table 3 Table 3 Export Encryption Classification for Cisco ASA 5500 Series Platform Encryption Licenses

Cisco ASA5550-DC-K8 firewall (hardware)

Contents

Download Pdf Manuals

Related Search

Related Contents