United States$5,000,000+
Inventory Delivered By
J
Jace Steele
4
5585-X SSP20 delivers enterprise-grade firewall performance with stable and reliable operation.
ASA5585-S20-K7
Original Stock
Ready to Ship
ASA 5585-X CHASSIS WITH SSP20 8 GE 2 SFP 2 MGT 1 AC NPE
FEATURED DEAL
Name:
ASA5585-S20-K7
- Description:
- ASA 5585-X CHASSIS WITH SSP20 8 GE 2 SFP 2 MGT 1 AC NPE
- Rating:
Added to cart 28 times recently
- Availability:
In stock - Ready to Ship
- Brand:
- Cisco
- GTIN:
- 882658373152
- Condition:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Shipping:
Payment:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Need Additional Discount on Product?
Request a quote below - Get Exclusive Pricing and Support.
Shipping:
Payment:
TRUSTED, TRIED, PROVEN
Officially Accredited
& Verified By
Next-Gen IT
Solutions Powered By
ASA5585-S20-K7 Overview
ASA5585-S20-K7 is a high-performance, rack-mounted firewall appliance engineered for enterprise and data center deployments. Built with robust hardware and redundant AC power supplies, it delivers up to 20 Gbps of firewall throughput while supporting advanced security services such as IPS, antivirus, web filtering, and VPN. Its modular port configuration includes multiple RJ-45 and SFP interfaces, ensuring flexible connectivity for both LAN and WAN environments.
Designed for scalability and high availability, ASA5585-S20-K7 supports centralized management through cloud, CLI, and GUI tools, making it ideal for complex deployments in branch offices or large enterprises. With active-passive failover clustering, rapid new session handling, and comprehensive threat protection services, the appliance meets rigorous security demands while delivering high throughput and reliability.
ASA5585-S20-K7 price is is available on request. Get immediate quote.
Request bulk order quote for ASA5585-S20-K7 for additional pricing. Browse the full Asa 5500 Series Business Edition Bundles series or explore all Cisco products.
ASA5585-S20-K7 Specifications
- Product Type
- Firewall Appliance
- Architecture
- Rack-mount
- Deployment Type
- Enterprise / Data Center / Branch Office
- Use Case
- VPN / Secure Access / UTM
- Firewall Layer Supported
- Layer 3 / Layer 7
- Power Source
- AC Power Supply
- Redundant Power Supply Supported
- Yes
- Firewall Throughput
- 20 Gbps
- Threat Protection Throughput
- 15 Gbps
- IPS Throughput
- 10 Gbps
- VPN Throughput
- 5 Gbps
- Supported Applications
- 500
- Centralized Configuration & Reporting
- Yes
- Feature
- Comprehensive threat intelligence integration
- Concurrent Sessions
- 2 Million
- Maximum Concurrent Sessions
- 2.5 Million
- Users/Nodes
- Unlimited
- Integrated I/O
- 4
- New Sessions Per Second
- 50,000
- Supported VPN Types
- IPSec / SSL VPN
- Routing Protocols Supported
- OSPF / BGP / Static Routing
- Security Services
- Antivirus / Web Filtering / Application Control / IPS / VPN
- High Availability
- Active-Passive
- Interfaces
- RJ-45 / SFP
- WAN Ports
- 2 WAN
- LAN Ports
- 8 LAN Ports
- Switch Ports
- Yes
- POE Ports
- No
- Management Options
- Cloud / CLI / GUI / SNMP
- Logging & Monitoring
- Built-in / Syslog / Cloud Logging
- Firewall Policies Supported
- 500
- Users Supported
- Unlimited
- Memory
- 16 GB
- Flash Storage
- 128 GB
- Expansion Slots
- SFP
- Form Factor
- 2 RU
- Rack Units
- 2 RU
- Device Type
- NGFW
- Product Name
- ASA5585-S20-K7
- Height
- 3.5 inches
- Width
- 17 inches
- Depth
- 17 inches
- Weight
- 35 lbs
ASA5585-S20-K7 Use Case
Data Center Perimeter Security with High-Throughput Firewall
A global financial services firm deploys the ASA5585-S20-K7 (ASA 5585-X Chassis with SSP20, 8 GE, 2 SFP, 2 MGT, 1 AC, NPE) at its primary data center edge to inspect east-west and north-south traffic at up to 20 Gbps. By leveraging the built-in SSL decryption and integrated intrusion prevention, the enterprise blocks advanced threats in real time, meets PCI DSS compliance and reduces incident response time by 60%.
Centralized VPN Aggregation for Multi-Site Retail Networks
A national retail chain uses the ASA5585-S20-K7 chassis with SSP20 at its headquarters to terminate and manage 2,000 site-to-site VPN tunnels from distributed stores. The platform’s 8 GE and 2 SFP interfaces deliver consistent 10 Gbps encrypted throughput while NPE-powered policy enforcement ensures granular access control. As a result, the retailer achieves 99.99% uptime, streamlines certificate management and simplifies branch-level firewall maintenance.
Scalable Secure Gateway for IoT and OT Environments
A utility provider implements the ASA5585-S20-K7 ASA 5585-X chassis with SSP20 to segment and protect its smart-grid IoT infrastructure. With up to 1.5 million concurrent sessions and hardware-accelerated deep-packet inspection, the appliance enforces zone-based policies for thousands of smart meters and SCADA endpoints. This approach reduces lateral threat propagation, ensures uninterrupted service delivery and meets NERC CIP regulatory requirements.
Quality Certifications
To get the detailed certification, please go to the Compliance Center.
Product Comparison Table 
| ASA5585-S20-K7 |  ASA5505-BUN-K9 |  ASA5555-K9 |  ASA5585-S40-2A-K9 |  ASA5585-S40-K7 | |
|---|---|---|---|---|---|
| Architecture | Rack-mount | Desktop | Rack-mount | Rack-mount | Rack-mount |
| Centralized Configuration & Reporting | Yes | ASDM | Cisco Adaptive Security Device Manager | Yes | Centralized Management |
| Concurrent Sessions | 2 Million | 25000 | 500000 | 4,000,000 | 1000000 |
| Deployment Type | Enterprise / Data Center / Branch Office | Small Business / Branch Office | Enterprise / Branch Office | Enterprise / Data Center | Enterprise / Branch Office |
| Depth | 17 inches | N/A | 18 inches | 28 inches | 18 inches |
| Device Type | NGFW | NGFW | NGFW | NGFW | NGFW |
| Expansion Slots | SFP | N/A | SFP | SFP | SFP |
| Feature | Comprehensive threat intelligence integration | Stateful Inspection | High Availability | High availability, clustering | IPS, Antivirus, Web Filtering, VPN |
| Firewall Layer Supported | Layer 3 / Layer 7 | Layer 3 / Layer 4 | Layer 3 / Layer 4 / Layer 7 | Layer 3 / Layer 4 / Layer 7 | Layer 7 |
| Firewall Policies Supported | 500 | N/A | 1000 | N/A | 500 |
| Firewall Throughput | 20 Gbps | 150 Mbps | 7 Gbps | 40 Gbps | 40 Gbps |
| Flash Storage | 128 GB | N/A | 128 GB | 16 GB | 128 GB |
| Form Factor | 2 RU | Desktop | Rack-mount | 2 RU | 1 RU |
| Height | 3.5 inches | N/A | 3.5 inches | 3.44 inches | 1 inch |
| High Availability | Active-Passive | Active-Passive | Active-Passive | Active-Passive | Active-Active |
| IPS Throughput | 10 Gbps | N/A | 2 Gbps | N/A | 10 Gbps |
| Integrated I/O | 4 | 8 | 4 | N/A | 8 |
| Interfaces | RJ-45 / SFP | RJ-45 | RJ-45 / SFP | RJ-45 / SFP | RJ-45 / SFP |
| LAN Ports | 8 LAN Ports | 8 LAN Ports | 8 LAN Ports | 8 LAN Ports | 8 LAN Ports |
| Logging & Monitoring | Built-in / Syslog / Cloud Logging | Built-in / Syslog | Built-in / Syslog | Built-in / Syslog | Built-in / Syslog |
| Management Options | Cloud / CLI / GUI / SNMP | CLI / GUI / SNMP | CLI / GUI / SNMP | CLI / GUI / Centralized / REST API / SNMP | Cloud / CLI / GUI / SNMP |
| Maximum Concurrent Sessions | 2.5 Million | 25000 | 1000000 | N/A | 1000000 |
| Memory | 16 GB | N/A | 8 GB | 8 GB | 16 GB |
| New Sessions Per Second | 50,000 | N/A | 50000 | 350,000 | 50000 |
| POE Ports | No | No | No | No | No |
| Power Source | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply |
| Product Name | ASA5585-S20-K7 | ASA5505-BUN-K9 | Cisco ASA5555-K9 Adaptive Security Appliance | ASA5585-S40-2A-K9 | ASA5585-S40-K7 |
| Product Type | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance |
| Rack Units | 2 RU | N/A | 2 RU | 2 RU | 1 RU |
| Redundant Power Supply Supported | Yes | No | Yes | Yes | Yes |
| Routing Protocols Supported | OSPF / BGP / Static Routing | OSPF / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing |
| Security Services | Antivirus / Web Filtering / Application Control / IPS / VPN | VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN |
| Supported Applications | 500 | N/A | 50 | N/A | 1000 |
| Supported VPN Types | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN |
| Switch Ports | Yes | Yes | Yes | No | Yes |
| Threat Protection Throughput | 15 Gbps | N/A | 3 Gbps | N/A | N/A |
| Use Case | VPN / Secure Access / UTM | VPN / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM |
| Users Supported | Unlimited | N/A | Unlimited | N/A | 500000 |
| Users/Nodes | Unlimited | 250 | Unlimited | Unlimited | Unlimited |
| VPN Throughput | 5 Gbps | 50 Mbps | 1.5 Gbps | 20 Gbps | 20 Gbps |
| WAN Ports | 2 WAN | N/A | 2 WAN | 2 WAN | 4 WAN |
| Weight | 35 lbs | N/A | 40 lbs | 48 lbs | 30 lbs |
| Width | 17 inches | N/A | 17 inches | 17.3 inches | 19 inches |
Reviews & Ratings
K
Kaia Monroe
5
Easy deployment and minimal configuration needed.
L
Landon Barrett
4
Handles high-traffic environments efficiently.
M
Mila Lane
4
Professional-grade appliance with consistent throughput.
N
Nolan Hayes
5
Durable and reliable for critical operations.
Questions & Answers
What is the Cisco ASA 5585-X chassis with SSP20 (SKU: ASA5585-S20-K7)?
The Cisco ASA 5585-X chassis with SSP20 (SKU: ASA5585-S20-K7) is a high-performance security appliance providing 8 Gigabit Ethernet ports, 2 SFP ports, 2 management ports, 1 AC power supply, and a Network Processing Engine (NPE) for advanced threat protection.
What firewall throughput does the ASA5585-S20-K7 support?
The ASA5585-S20-K7 delivers up to 10 Gbps of firewall throughput with the SSP20 module, ensuring low latency and high performance for enterprise networks.
How many interfaces are available on the ASA5585-S20-K7?
The ASA5585-S20-K7 features 8 fixed Gigabit Ethernet ports, 2 SFP ports for fiber connectivity, two dedicated management ports, and external console access for flexible network integration.
What is the role of the SSP20 module in this chassis?
The SSP20 module provides hardware-accelerated packet processing, enabling advanced inspection and VPN encryption at up to 10 Gbps to secure large data flows and complex applications.
What is the Network Processing Engine (NPE) in the ASA5585-S20-K7?
The Network Processing Engine (NPE) is an integrated hardware component that offloads security functions like intrusion prevention and deep packet inspection, optimizing performance and reducing CPU load.
Which power supply is included with ASA5585-S20-K7?
The ASA5585-S20-K7 includes a single AC power supply rated at 100–240 VAC with automatic voltage selection and hot-swappable capability for uninterrupted operation.
What security services are supported on the ASA5585-S20-K7?
The ASA5585-S20-K7 supports firewall, VPN (IPsec and SSL), intrusion prevention (IPS), antivirus, anti-malware, and URL filtering when paired with Cisco Security Services licenses.
How do I license the ASA5585-S20-K7?
Licensing is managed through Cisco’s Smart Licensing portal; you can activate Base, Threat, or AnyConnect VPN licenses to enable required security features and user counts.
Which software versions are compatible with ASA5585-S20-K7?
The ASA5585-S20-K7 is compatible with Cisco ASA Software releases 9.x and later, including Firepower Threat Defense (FTD) in migration scenarios.
What management interfaces does ASA5585-S20-K7 offer?
Management options include two dedicated Gigabit Ethernet management ports, a console port, SSH, and support for Cisco Adaptive Security Device Manager (ASDM) and REST APIs.
Can I configure high availability on the ASA5585-S20-K7?
Yes, the ASA5585-S20-K7 supports Active/Standby high availability with stateful failover to ensure uninterrupted security services.
What are the physical dimensions and weight of the ASA5585-S20-K7?
The chassis measures 1.72 x 17.5 x 16.35 inches (H x W x D) and weighs approximately 19 lbs (8.6 kg), fitting standard 1U rack space.
What environmental specifications apply to ASA5585-S20-K7?
Operating temperature ranges from 32°F to 104°F (0°C to 40°C) with 5%–90% non-condensing humidity, and storage temperature from –4°F to 158°F (–20°C to 70°C).
What warranty and support options are available?
Cisco offers a limited hardware warranty for one year, with optional SMARTnet service for 24x7 technical support, software updates, and expedited hardware replacement.
How do I order replacement parts or upgrades for ASA5585-S20-K7?
Order replacement modules, power supplies, or advanced services through Cisco’s parts catalog or authorized partners, using SKU identifiers to ensure compatibility.