Cisco ISA570-BUN3-K9 Integrated Security Appliance with Comprehensive Security Subscription

• SMB Internet Gateway Security - Consolidates firewall, IPS, antivirus, web security and application control at the network edge, reducing the need for multiple security appliances.
• Multi-Branch Connectivity - IPsec site-to-site VPN support with up to 100 site-to-site tunnels enables encrypted communication between offices and remote locations.
• Remote Workforce Access - Up to 75 IPsec remote-access tunnels and 50 SSL VPN tunnels support secure access for distributed and mobile users.
• Dual-ISP Resilience - Dual-WAN, failover/failback, load balancing and policy-based routing help maintain connectivity when an Internet path becomes unavailable.
• DMZ-Based Public Services - Zone-based firewalling and DMZ support allow Internet-facing services to be separated from the internal LAN.
• Branch Network Segmentation - Support for up to 16 VLANs and 802.1Q trunking helps separate business, guest, voice and other network traffic logically.
• VoIP-Enabled Business Networks - SIP and H.323 support, ALG capabilities and QoS functions help integrate voice traffic with the secured business network.
• Managed SMB Security Deployment - Browser-based configuration, monitoring, reporting, logging and diagnostics simplify administration for lean IT teams.

• 500 Mbps Stateful Packet Inspection Throughput - Provides substantially more firewall inspection capacity than the ISA550's 200 Mbps rating, making ISA570 the higher-performance wired choice within the ISA500 family.
• 40,000 Maximum Concurrent Connections - Gives the appliance a higher connection ceiling for busier SMB and branch environments than the ISA550's 15,000-connection capacity.
• Zone-Based Firewall - Enables policy-based traffic control between network zones and supports DMZ architectures for better separation of internal and externally accessible resources.
• 90 Mbps IPS Throughput - Adds intrusion-prevention inspection at the gateway to identify and block potentially malicious traffic.
• 80 Mbps Antivirus Throughput - Provides gateway-level antivirus inspection designed to stop malicious content before it reaches protected network resources.
• 75 Mbps UTM Throughput - Combines multiple security inspection functions in one appliance, supporting a consolidated security architecture.
• 130 Mbps IPsec VPN Throughput - Supports encrypted site-to-site and remote connectivity without requiring a separate VPN gateway.
• 100 IPsec Site-to-Site VPN Tunnels - Provides capacity for geographically distributed branch connectivity and partner links.
• 75 IPsec Remote-Access Tunnels - Supports a larger remote-user VPN requirement than the ISA550's 10-tunnel rating.
• 50 SSL VPN Tunnels - Gives remote users an additional secure-access option where SSL-based connectivity is preferred.
• Dual WAN with Automated Failover/Failback - Helps improve Internet availability and reduce disruption caused by WAN or ISP failures.

• Brand: Cisco
• Product Family: Cisco Small Business ISA500 Series
• Product Type: Integrated Security Appliance
• Model: ISA570
• SKU: ISA570-BUN3-K9
• Deployment Type: Wired
• Subscription: 3-year comprehensive security subscription
• Firewall: Zone-based firewall with stateful packet inspection
• Stateful Inspection Throughput: 500 Mbps
• Maximum Concurrent Connections: 40,000
• Maximum Firewall Rules: 100
• Sessions Per Second: 3,000 cps
• DoS Protection: Yes
• IPS Throughput: 90 Mbps
• Antivirus Throughput: 80 Mbps
• UTM Throughput: 75 Mbps
• IPsec VPN Throughput: 130 Mbps
• IPsec Site-to-Site Tunnels: 100
• IPsec Remote-Access Tunnels: 75
• SSL VPN Tunnels: 50
• VPN Encryption: DES, 3DES, AES 128/192/256-bit
• VPN Authentication: MD5, SHA-1, SHA2 256/384/512-bit
• IPsec Dead Peer Detection: Yes
• IPsec NAT Traversal: Yes
• IPsec NetBIOS Broadcast: Yes
• VPN Pass-Through: IPsec, PPTP, L2TP
• Cisco VPN Client Support: Yes
• Cisco AnyConnect SSL VPN Client Support: Yes
• VPN Split Tunneling: IPsec and SSL VPN supported

Why Choose This Product?

• Higher-performance ISA500 option - ISA570 increases stateful inspection capacity to 500 Mbps versus 200 Mbps on ISA550, making it the stronger wired model when traffic and connection requirements are higher.
• Consolidated security architecture - Firewall, IPS, antivirus, web filtering, application control, anti-phishing and related UTM functions are integrated into one platform.
• Built for distributed connectivity - 100 site-to-site IPsec tunnels and 75 remote-access IPsec tunnels provide meaningful VPN capacity for branch and remote-user deployments.
• WAN resilience without another appliance - Dual-WAN support, load balancing, policy-based routing and automated failover/failback can improve connectivity continuity.
• Compact infrastructure footprint - The 1U, 308 × 180 × 49 mm chassis is suited to branch racks and compact network environments.
• Procurement-friendly 3-year bundle - The BUN3 SKU packages the ISA570 with a three-year comprehensive security subscription, helping buyers plan the initial security lifecycle as a single SKU.
• Flexible network segmentation - Up to 16 VLANs, DMZ support, multiple interface assignments and 802.1Q trunking support enable structured branch and SMB network designs.