What is 10-user/3DES bundle ?

Forgive my ignorance, but i have a network integration to do, and have some questions on what type of firewall appliance to install.

Does the 10 user mean? 10 total concurrent users? inbound or outbound?10 hosts? to connections to the internet? 10 VPN connection or tunnels?

Perhaps a better question would be if i have an organization with 30+ user that all use the internet would a 10-user/3DES bundle device suffice, or should i plan to purchase a 50- user bundle. I have search for a straight answer on this, but have several differnet answers. I just need to know if the 10 user will work for an organization this size , or i should invest in the 50-user bundle?
Who is Participating?
If you have 30 users, you will not be able to use the 10 user bundle. That will limit you to the first 10 internal hosts that hit the firewall trying to go out.
You need the 50 user bundle, but the 501 is no longer for sale. It has been replaced by the much-more-capable Cisco ASA5505
ASA 5505 Appliance with SW, 50 Users, 8 ports, 3DES/AES  
You will be much much happier with a new ASA instead of an old obsolete PIX501

End-of-Life Milestones and Dates for the Cisco PIX 501 Security Appliance:
End-of-Sale Date
 The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.
 July 28, 2008
That covers the part about the users (aka internal hosts, in Cisco licensing terminology), but it doesn't cover the 3DES part.
3DES simply means that the device has a strong cryptography license and has advanced encryption such as 3DES, and AES 128-256 enabled. In some countries this is illegal, so be sure to check. It is legal in the U.S. and most 1st world countries.
Another way to make sure your device has a 3DES/strong crypto license is if the part number contains "K9". If it only has "K8" then you don't have a strong crypto license.
Strong crypto is important because it is nearly impossible to crack - it is imperative you use this on mission critical or confidential data being sent over VPN.
a "K8" or DES license is considered weak crypto, and while the information being transferred is still encrypted, the encryption can be broken quite easily and is thus not considered secure anymore.
I hope this helps!
And yes, the ASAs are wonderful. They're so much better than PIXes and even cheaper.
Just make sure you get the correct license at first or you can expect to dish out another $500 USD to $2000 USD down the road to correct the licensing oversight. I recommend you consult with Cisco before purchasing.
Basically if you want to have servers in the DMZ and have more than 10 users, you should just get part number:

This gives you unlimited users and an Security Plus license which means you have strong crypto and an unrestriced DMZ, as well as failover options for redundancy.
:-) Cheers!
And here is Cisco's product datasheet page for the ASA 5500 series devices.
You can find throughput specs and capabilites, and also part numbers and related information near the bottom of the page.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.