Cisco ISA570-BUN1-K9 Integrated Security Appliance

• Branch Office Firewall - Protects remote offices with stateful firewall, IPS and integrated threat controls.
• SMB Internet Gateway - Consolidates perimeter security, routing, VPN and content-security functions.
• Multi-Branch VPN - Supports up to 100 IPsec site-to-site tunnels for encrypted office connectivity.
• Remote Workforce Access - Supports up to 75 IPsec remote-access and 50 SSL VPN tunnels.
• Dual-ISP Business Continuity  - Uses dual WAN, load balancing and automated failover/failback to improve WAN availability.
• VLAN-Segmented Networks - Supports 16 VLANs and 802.1Q trunking for logical traffic separation.
• DMZ Security - Provides a DMZ architecture for separating externally accessible services from internal resources.
• VoIP Networks - Supports SIP and H.323 with QoS features for business voice traffic.
• Application and Web Control - Provides application control, URL filtering and web-threat protection.
• Managed SMB Security - Supports local logging, syslog, diagnostics and multiple authentication methods for practical administration.

• 500 Mbps Stateful Packet Inspection - Provides the ISA570's documented firewall capacity and gives buyers a measurable performance target for branch and SMB network sizing.
• 40,000 Concurrent Connections - Provides more session capacity for busier networks and application-rich branch environments than the ISA550's 15,000-connection limit.
• 3,000 Sessions per Second - Supports frequent connection establishment for networks with varied application and Internet traffic.
• Zone-Based Firewall - Enables security policies between network zones, helping administrators control traffic between internal, external and DMZ segments.
• 90 Mbps IPS Throughput - Adds intrusion-prevention inspection at the network edge to identify and respond to potentially malicious traffic.
• 80 Mbps Antivirus Throughput - Provides gateway antivirus inspection to help screen malicious content before it reaches protected network resources.
• 75 Mbps UTM Throughput - Combines multiple security inspection functions within the appliance, reducing the requirement for separate security platforms.
• 130 Mbps IPsec VPN Throughput - Provides encrypted connectivity for branch-to-branch and remote-access deployments while keeping VPN processing on the security gateway.

• Brand: Cisco
• Product Family: Cisco Small Business ISA500 Series
• Product Type: Integrated Security Appliance
• Model: ISA570
• SKU: ISA570-BUN1-K9
• Deployment: Wired
• Security Subscription: 1-year comprehensive security subscription
• Firewall Type: Zone-based firewall with stateful packet inspection
• Stateful Inspection Throughput: 500 Mbps
• Maximum Concurrent Connections: 40,000
• Maximum Firewall Rules: 100
• Sessions per Second: 3,000 cps
• Denial-of-Service Protection: Yes
• IPS Throughput: 90 Mbps
• Antivirus Throughput: 80 Mbps
• UTM Throughput: 75 Mbps
• IPsec VPN Throughput: 130 Mbps
• IPsec Site-to-Site VPN Tunnels: 100
• IPsec Remote-Access VPN Tunnels: 75
• SSL VPN Tunnels: 50
• VPN Encryption: DES, 3DES, AES 128/192/256-bit
• VPN Authentication: MD5, SHA-1, SHA2 256/384/512-bit
• IPsec Dead Peer Detection: Yes
• IPsec NAT Traversal: Yes
• IPsec NetBIOS Broadcast: Yes
• VPN Pass-Through: IPsec, PPTP, L2TP
• Cisco VPN Client Support: Yes
• Cisco VPN Client Mode: Yes
• Cisco VPN Network Extension Mode: Yes
• IPsec Split Tunneling: Yes
• Cisco AnyConnect SSL VPN Client: Yes

Why Choose This Product?

• Higher capacity than ISA550 - ISA570 provides 500 Mbps stateful inspection versus 200 Mbps on ISA550, making it the stronger choice when network traffic and security-inspection requirements are increasing.
• 40,000-connection ceiling - The higher concurrent-session capacity gives buyers more headroom for active users, applications and Internet connections than the ISA550.
• Expanded VPN capacity - Up to 100 site-to-site IPsec, 75 IPsec remote-access and 50 SSL VPN tunnels make it better suited to distributed organizations.
• Consolidated security platform - Firewall, IPS, antivirus, web protection, application control and VPN functions are integrated into one appliance, reducing infrastructure sprawl.
• WAN resilience built in - Dual WAN, policy-based routing, load balancing and automated failover/failback provide practical options for improving Internet continuity.
• Flexible segmentation - Sixteen VLANs, 802.1Q trunking and DMZ support enable structured network separation without requiring separate security appliances for each segment.
• Compact deployment footprint - A 1U chassis with rack- and wall-mount options fits branch offices and constrained network infrastructure spaces.
• Simplified initial procurement - The BUN1-K9 SKU combines the ISA570 hardware with one year of comprehensive security subscription coverage, giving procurement teams a defined initial subscription term.