{"id":922,"date":"2015-08-29T19:43:00","date_gmt":"2015-08-29T19:43:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2015\/08\/29\/cisco-asa-5585x-architecture-deep-dive\/"},"modified":"2023-02-04T08:40:15","modified_gmt":"2023-02-04T08:40:15","slug":"cisco-asa-5585x-architecture-deep-dive","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html","title":{"rendered":"Cisco ASA 5585X Architecture Deep Dive"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-662e45bcbad63\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-662e45bcbad63\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#Introduction\" title=\"Introduction\">Introduction<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#CHASSIS\" title=\"CHASSIS\">CHASSIS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#Architecture\" title=\"Architecture\">Architecture<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#DATA_PATH\" title=\"DATA_PATH\">DATA_PATH<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#ASA5500-X\" title=\"ASA5500-X\">ASA5500-X<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#5585X\" title=\"5585X\">5585X<\/a><ul class='ez-toc-list-level-6' ><li class='ez-toc-heading-level-6'><ul class='ez-toc-list-level-6' ><li class='ez-toc-heading-level-6'><ul class='ez-toc-list-level-6' ><li class='ez-toc-heading-level-6'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#Caveats\" title=\"Caveats\">Caveats<\/a><\/li><\/ul><\/li><\/ul><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#Buffer_Blocks\" title=\"Buffer Blocks\">Buffer Blocks<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#ASP_Loadbalacing\" title=\"ASP Loadbalacing\">ASP Loadbalacing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\/#References\" title=\"References\">References<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Introduction\"><\/span>Introduction<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"CHASSIS\"><\/span>CHASSIS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The Cisco ASA 558X is a chassis based firewall. The chassis consists of 2 slots, each slot can be populated with either an SSP (Security Services Processor) or Interface Module (ASA5585-NM-XX).<\/p>\n<p>The SSPs come in various models &#8211; SSP10, SSP20, SSP40 and SSP60. With each SSP ranging in varying specification depending on the amount of\u00a0 traffic that you need to process.<\/p>\n<p>There are 4 types of SSP. They are,<\/p>\n<ul>\n<li>SSP-XX FW\/VPN<\/li>\n<li>SSP-XX IPS<\/li>\n<li>SSP-XX CX<\/li>\n<li>SSP-XX FIREpower (will replace IPS\/CX which are going EOL)<\/li>\n<\/ul>\n<p>Based on their being 2 slots and various SSP types this can raise some questions. Below looks to answer some of the commonly asked questions around the 5585X chassis and SSP&#8217;s.<\/p>\n<ul>\n<li>The SSP-XX FW\/VPN must always be present in slot0.<\/li>\n<li>A maximum of 2 interface modules can be installed into slot1.<\/li>\n<li>If only one 1 interface module is installed a slot divider is required. This is needed for air flow.<\/li>\n<li>The Security Plus license is required for the SSP10 and SSP20 in order to enable the 10Gb ports, This includes the integrated ports.<\/li>\n<li>2 x FW\/VPN SSPs can be installed within a single chassis, however each SSP will be seen as an individual firewall. This, in turn allows you to cluster the 2.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Architecture\"><\/span>Architecture<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The ASA5585X architecture is very different to that of the ASA5500X family. How, you may ask ? Let me explain.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"DATA_PATH\"><\/span>DATA_PATH<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Before we begin we should really take a moment to mention the DATA_PATH thread. These threads are spawned from the Dispatch_Unit process with each core running a DATA_PATH thread. Each core\/DATA_PATH thread walks the rings looking for packets. The core locks to the ring, until it has pulled all of the packets into software for further processing.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ASA5500-X\"><\/span>ASA5500-X<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>First of all lets look at the architecture of an ASA5500-X. Each external port is attached to the NIC. With each NIC containing a single RX\/TX ring.<\/p>\n<p>Based on the diagram below lets look at the path of an ingress packet,<\/p>\n<ol>\n<li>The packet enters one of the onboard 1Gb ports.<\/li>\n<li>The packet is sent to the RX ring.<\/li>\n<li>A CPU core (DATA_PATH thread) then pulls the packet from the ring and passed it into software for processing.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><span class=\"uk-badge\">NOTE <\/span> For simplicity only the RX rings are shown in the diagrams. In reality there are the same amount of TX rings as there are RX rings present.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"5585X\"><\/span>5585X<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The 5585X is built around a distributed architecture model. There are 4 main components,<\/p>\n<ul>\n<li><strong>External Ports<\/strong> &#8211; The physical port that receives the frame.<\/li>\n<li><strong>Switch Fabric<\/strong> &#8211; Linked to the external ports. The switch fabric also has multiple uplinks to the MAC uplinks.<\/li>\n<li><strong>10Gb MAC Uplinks<\/strong> &#8211; Each MAC uplink contains multiple TX\/RX rings and FIFO queues. These are grouped, i.e a set of TX\/RX rings are grouped to a single FIFO queue. The total number of MAC Uplinks and TX\/RX rings is dependent on the SSP model.<\/li>\n<li><strong>CPU Complex<\/strong> &#8211; Contains the CPU cores. The total number of cores is dependent on the SSP model.<\/li>\n<\/ul>\n<p><span class=\"uk-badge\">NOTE <\/span> Both the MAC Uplinks and the CPU complex are physically located on the SSP.<\/p>\n<p>Now that you we have covered the main components. To full understand how they inter-operate lets looks at how an ingress packet is processed.<\/p>\n<ol>\n<li>The packet enters one of the external ports and is passed to the switch fabric.<\/li>\n<li>A hash is created based on the source\/destination IP and also the source\/destination port of the packet.<\/li>\n<li>Next an uplink and RX ring is selected. The packet is then sent from the switch fabric to the selected uplink.<\/li>\n<li>The packet processed through upto the selected RX ring.<\/li>\n<li>The packet is then pulled from the RX ring by the CPU (DATA_PATH thread)\u00a0 into software for processing.<\/li>\n<li>Further packets are persisted to the same uplink\/ring based on the previously created hash.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch.png\" data-lightbox=\"\"><picture><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch.avif 1173w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-300x156.avif 300w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-1024x532.avif 1024w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-768x399.avif 768w\" sizes=\"(max-width: 1173px) 100vw, 1173px\" type=\"image\/avif\"><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch.webp 1173w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-300x156.webp 300w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-1024x532.webp 1024w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-768x399.webp 768w\" sizes=\"(max-width: 1173px) 100vw, 1173px\" type=\"image\/webp\"><img src=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch.png\" height=\"609\" width=\"1173\" srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch.png 1173w, https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-300x156.png 300w, https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-1024x532.png 1024w, https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5585x-arch-768x399.png 768w\" sizes=\"(max-width: 1173px) 100vw, 1173px\" class=\"alignnone wp-image-920 size-full sp-no-webp\" alt=\"distributed architecture model\" loading=\"lazy\" decoding=\"async\" style=\"width: 85%; display: block; margin-left: auto; margin-right: auto;\"  > <\/picture><\/a><\/p>\n<h6><span class=\"ez-toc-section\" id=\"Caveats\"><\/span><strong>Caveats<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h6>\n<p>Though the architecture has been designed for performance, the following caveats should be noted,<\/p>\n<ul>\n<li>A single flow can end up on a single core. This isn&#8217;t ideal when is comes to super flows (i.e traffic streams that microburst). This can lead to overruns on the RX rings as the CPU core is unable keep up with the packet rate.<\/li>\n<li>Because the ring buffers do not reside on the external facing interfaces (i.e show interface te0\/6). Interface errors are viewed from within the MAC Uplink (i.e show interface internal-data0\/0 etc).<\/li>\n<li>Flow Control is supported, but due to the distributed architect model the implementation of this feature is slightly different. Flow control is still configured on the external facing interface however as the interfaces do not have the ring buffers attached the configurable watermark options are not available. It is also worth noting though the defaults are\u00a064KB low, 128KB high, 26624 time units, these defaults are the same as the 5580.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Buffer_Blocks\"><\/span>Buffer Blocks<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>One quick point around buffer blocks. The flows previously mentioned reference the packets being pulled from the rings via the cores. Though ,in essence true this process has been simplified for ease of explanation throughout this article.<\/p>\n<p>From RX ring to CPU complex here is a full breakdown,<\/p>\n<ol>\n<li>The CPU complex instructs the RX ring with the memory locations where the ingress packet should be stored.<\/li>\n<li>The RX ring populates these memory locations (blocks) with the ingress packets.<\/li>\n<li>These packets are then pulled from the memory blocks by the CPU complex for processing.<\/li>\n<li>The memory blocks are then refilled by the RX ring with new ingress packets.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"ASP_Loadbalacing\"><\/span>ASP Loadbalacing<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>As previously mentioned the cores lock to a ring until the ring is empty. To change this behavior the command <span class=\"codeinline\">asp load-balance<\/span>is used.<br \/>\nIt is recommended to change the default ASP Loadbalancing behavior when any of the following is observed,<\/p>\n<ul>\n<li>uneven usage across the cores<\/li>\n<li>overruns seen on the RX rings even though the CPU usage appears low. Typically seen with traffic microbursts<\/li>\n<\/ul>\n<p>There are 2 options when configuring ASP loadbalancing. They are,<\/p>\n<p><strong>Per-Packet<\/strong> &#8211; Each core i.e DATA_PATH thread locks to the ring on a per packet basis.<\/p>\n<pre class=\"prettyprint\">ciscoasa5585x\/pri\/act(config)# asp load-balance per-packet<\/pre>\n<p><strong>Per-Packet-Auto<\/strong> &#8211; Introduced within\u00a09.3(1) allows the ASA to adaptively switch <span class=\"codeinline\">asp loadbalance per packet<\/span> on and off. Further details around this command can be found <a href=\"http:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/asa\/asa-command-reference\/A-H\/cmdref1\/a3.html#pgfId-1815512\">here<\/a>.<\/p>\n<pre class=\"prettyprint\">ciscoasa5585x\/pri\/act(config)# asp load-balance per-packet-auto<\/pre>\n<h2><span class=\"ez-toc-section\" id=\"References\"><\/span>References<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><a href=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/www.alcatron.net_Cisco-Live-2014-Melbourne_Cisco-Live-Content_Security_BRKSEC-3020-Troubleshooting-ASA-Firewalls.pdf\">Cisco Live (BRKSEC-3020-Troubleshooting)<\/a><\/li>\n<li><a href=\"http:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/security\/asa-5585-x-adaptive-security-appliance\/whitepaper_C11-731802.html\">ASA5585X WhitePaper<\/a><\/li>\n<li><a href=\"http:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/asa\/asa-command-reference\/A-H\/cmdref1\/a3.html#pgfId-1815513\">ASP Loadbalance Command Details<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based firewall. The chassis consists of 2 slots, each slot can be populated with either an SSP (Security Services Processor) or Interface Module (ASA5585-NM-XX). The SSPs come in various &#8230; <a title=\"Cisco ASA 5585X Architecture Deep Dive\" class=\"read-more\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\" aria-label=\"Read more about Cisco ASA 5585X Architecture Deep Dive\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":919,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cisco ASA 5585X Architecture Deep Dive - Fir3net<\/title>\n<meta name=\"description\" content=\"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cisco ASA 5585X Architecture Deep Dive - Fir3net\" \/>\n<meta property=\"og:description\" content=\"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"2015-08-29T19:43:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-04T08:40:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1271\" \/>\n\t<meta property=\"og:image:height\" content=\"447\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"Cisco ASA 5585X Architecture Deep Dive\",\"datePublished\":\"2015-08-29T19:43:00+00:00\",\"dateModified\":\"2023-02-04T08:40:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\"},\"wordCount\":1077,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png\",\"articleSection\":[\"Cisco Firewalls\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\",\"url\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\",\"name\":\"Cisco ASA 5585X Architecture Deep Dive - Fir3net\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png\",\"datePublished\":\"2015-08-29T19:43:00+00:00\",\"dateModified\":\"2023-02-04T08:40:15+00:00\",\"description\":\"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png\",\"width\":1271,\"height\":447},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.fir3net.com\/security\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Cisco Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\/cisco\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Cisco ASA 5585X Architecture Deep Dive\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cisco ASA 5585X Architecture Deep Dive - Fir3net","description":"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html","og_locale":"en_US","og_type":"article","og_title":"Cisco ASA 5585X Architecture Deep Dive - Fir3net","og_description":"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based","og_url":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html","og_site_name":"Fir3net","article_published_time":"2015-08-29T19:43:00+00:00","article_modified_time":"2023-02-04T08:40:15+00:00","og_image":[{"width":1271,"height":447,"url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png","type":"image\/jpeg"}],"author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"Cisco ASA 5585X Architecture Deep Dive","datePublished":"2015-08-29T19:43:00+00:00","dateModified":"2023-02-04T08:40:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html"},"wordCount":1077,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"image":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage"},"thumbnailUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png","articleSection":["Cisco Firewalls"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html","url":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html","name":"Cisco ASA 5585X Architecture Deep Dive - Fir3net","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage"},"image":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage"},"thumbnailUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png","datePublished":"2015-08-29T19:43:00+00:00","dateModified":"2023-02-04T08:40:15+00:00","description":"Introduction Within this article we will take an in-depth look into the architecture of the Cisco ASA 5585X. CHASSIS The Cisco ASA 558X is a chassis based","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#primaryimage","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2015\/08\/images_5500x-arch.png","width":1271,"height":447},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-5585x.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.fir3net.com\/security"},{"@type":"ListItem","position":3,"name":"Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls"},{"@type":"ListItem","position":4,"name":"Cisco Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls\/cisco"},{"@type":"ListItem","position":5,"name":"Cisco ASA 5585X Architecture Deep Dive"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/922"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=922"}],"version-history":[{"count":2,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/922\/revisions"}],"predecessor-version":[{"id":3618,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/922\/revisions\/3618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media\/919"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}