United States$5,000,000+
Inventory Delivered By
P
Paige Monroe
5
5585-X SSP20 chassis delivers stable and reliable firewall throughput for enterprise networks.
ASA5585-S20-K8
ASA 5585-X CHASSIS WITH SSP20 8GE 2SFP 2GE MGT 1 AC DES
FEATURED DEAL
Name:
ASA5585-S20-K8
- Description:
- ASA 5585-X CHASSIS WITH SSP20 8GE 2SFP 2GE MGT 1 AC DES
- Rating:
Added to cart 28 times recently
- Availability:
In stock - Ready to Ship
- Brand:
- Cisco
- GTIN:
- 626218310498
- Condition:
- Warranty:
- 3
- List Price:
$71,994.00
- Price:
$31,883.0055.7% off
Quantity:
1
Business price:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Shipping:
Payment:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Need Additional Discount on Product?
Request a quote below - Get Exclusive Pricing and Support.
Shipping:
Payment:
TRUSTED, TRIED, PROVEN
Officially Accredited
& Verified By
Next-Gen IT
Solutions Powered By
ASA5585-S20-K8 Overview
ASA5585-S20-K8 is a high-performance chassis-based firewall appliance engineered for enterprise and data center environments that demand robust throughput and comprehensive security services. It delivers exceptional performance with a modular hardware design, integrating multi-core processing to support IPS, antivirus, web filtering, and VPN functionalities while accommodating a flexible port configuration including LAN, WAN, and SFP interfaces with redundant AC power supplies to ensure continuous operation.
ASA5585-S20-K8 is optimized for diverse deployment scenarios ranging from large enterprises and branch offices to cloud integrations, offering centralized management through CLI, GUI, and REST APIs. Its built-in high availability and clustering capabilities ensure seamless scalability, efficient session management, and real-time threat protection, making it an ideal choice for modern secure network infrastructures.
ASA5585-S20-K8 price is $31,883.00, a 55.7% saving from the Cisco list price of $71,994.00. ASA5585-S20-K8 is in stock and available for next-day dispatch. (terms applied)
Request bulk order quote for ASA5585-S20-K8 for additional pricing. Browse the full Cisco Asa 5500 Series series or explore all Cisco products.
ASA5585-S20-K8 Specifications
- Product Type
- Firewall Appliance
- Architecture
- Chassis
- Deployment Type
- Enterprise / Data Center / Branch Office
- Use Case
- VPN / Secure Access / UTM
- Firewall Layer Supported
- Layer 7
- Power Source
- AC Power Supply
- Redundant Power Supply Supported
- Yes
- Firewall Throughput
- 20 Gbps
- Threat Protection Throughput
- 5 Gbps
- IPS Throughput
- 4 Gbps
- VPN Throughput
- 6 Gbps
- Supported Applications
- 10
- Centralized Configuration & Reporting
- Yes
- Feature
- High Availability, Clustering, Scalability
- Concurrent Sessions
- 2 Million
- Maximum Concurrent Sessions
- 2 Million
- Users/Nodes
- Unlimited
- Integrated I/O
- 4
- New Sessions Per Second
- 150,000
- Supported VPN Types
- IPSec / SSL VPN / L2TP / PPTP / GRE
- Routing Protocols Supported
- OSPF / BGP / RIP / Static Routing
- Security Services
- Antivirus / Web Filtering / Application Control / IPS / DLP / Sandboxing / VPN
- High Availability
- Active-Active
- Interfaces
- RJ-45 / SFP / SFP+
- WAN Ports
- 2 WAN
- LAN Ports
- 8 LAN Ports
- Switch Ports
- No
- POE Ports
- No
- Management Options
- Cloud / CLI / GUI / Centralized / REST API / SNMP
- Logging & Monitoring
- Built-in / Syslog / Cloud Logging
- Firewall Policies Supported
- 500
- Users Supported
- N/A
- Memory
- 16 GB
- Flash Storage
- 128 GB
- Expansion Slots
- SFP
- Form Factor
- Chassis
- Rack Units
- 4 RU
- Device Type
- NGFW
- Product Name
- ASA5585-S20-K8
- Height
- 4 inches
- Width
- 17 inches
- Depth
- 20 inches
- Weight
- 50 lbs
ASA5585-S20-K8 Use Case
High-Throughput Data Center Edge Security with ASA5585-X SSP20
Scenario: A global financial services firm deploys the ASA5585-X chassis equipped with the SSP20 (8GE, 2 SFP, 2 GE MGT) at its primary data center perimeter. Deployment delivers up to 20 Gbps of stateful firewall throughput, advanced intrusion prevention and SSL decryption in a single appliance. Outcome: Achieves sub-millisecond latency, real-time threat inspection and full PCI DSS compliance, ensuring high-speed protection for mission-critical transactions.
Scalable Hub-and-Spoke VPN for Enterprise Hybrid Cloud
Scenario: A Fortune 500 manufacturer centralizes connectivity for 200 branch sites and AWS workloads by using an ASA5585-X chassis with SSP20 to aggregate IPsec tunnels. The 8x GE and 2x SFP ports support up to 10,000 concurrent VPN sessions and pair in active/standby for 99.999% uptime. Outcome: Delivers centralized policy enforcement, seamless hybrid-cloud connectivity and high availability, reducing network management overhead by 40%.
Virtualized Multi-Tenant Security for Managed Service Providers
Scenario: A national managed-security provider hosts segregated firewall contexts on ASA5585-X with SSP20, offering dedicated 8 GE and 2 SFP throughput plus 2 GE management per tenant. Each customer network is isolated via hardware-based virtual contexts with granular access control and on-demand provisioning. Outcome: Ensures predictable performance, end-to-end compliance and accelerates new tenant onboarding by 50%, while maximizing chassis utilization.
Quality Certifications
To get the detailed certification, please go to the Compliance Center.
Product Comparison Table 
 ASA5585-S20-K8 |  ASA5585-S20X-K9 |  ASA5525-K9 |  ASA5585-S10-K9 |  ASA5580-20-BUN-K9 | |
|---|---|---|---|---|---|
| Architecture | Chassis | Rack-mount | Rack-mount | Rack-mount | Rack-mount |
| Centralized Configuration & Reporting | Yes | Cisco ASA Management Center | Cisco ASDM / Cisco Security Manager | Cisco ASDM / FMC | N/A |
| Concurrent Sessions | 2 Million | 1000000 | 250,000 | N/A | N/A |
| Deployment Type | Enterprise / Data Center / Branch Office | Enterprise / Data Center / Branch / Cloud | Enterprise / Branch Office | Enterprise / Data Center | Enterprise / Branch Office |
| Depth | 20 inches | 30 inches | 16.9 in | 16.5 | N/A |
| Device Type | NGFW | NGFW | NGFW | NGFW | NGFW |
| Expansion Slots | SFP | SFP | N/A | SFP | SFP |
| Feature | High Availability, Clustering, Scalability | Integrated Security Services | Advanced Threat Defense, IPS, VPN, Web Filtering, Antivirus | Advanced Malware Protection, Threat Intelligence | Advanced Threat Defense |
| Firewall Layer Supported | Layer 7 | Layer 3 / Layer 4 / Layer 7 | Layer 3 / Layer 4 | Layer 3 / Layer 4 | Layer 3 |
| Firewall Policies Supported | 500 | N/A | N/A | N/A | N/A |
| Firewall Throughput | 20 Gbps | 20 Gbps | 2.5 Gbps | 15 Gbps | 20 Gbps |
| Flash Storage | 128 GB | 128 GB SSD | 16 GB | 64 GB | 16 GB |
| Form Factor | Chassis | Rack-mount | 1 RU | 1 RU | Rack-mount |
| Height | 4 inches | 3.44 inches | 1.7 in | 1.75 | N/A |
| High Availability | Active-Active | Active-Passive | Active-Passive | Active-Passive | Active-Passive |
| IPS Throughput | 4 Gbps | 4 Gbps | 600 Mbps | N/A | N/A |
| Integrated I/O | 4 | N/A | N/A | N/A | N/A |
| Interfaces | RJ-45 / SFP / SFP+ | RJ-45 / SFP | RJ-45 / SFP | RJ-45 / SFP | SFP |
| LAN Ports | 8 LAN Ports | 4 LAN Ports | 4 LAN Ports | 8 LAN Ports | 4 LAN Ports |
| Logging & Monitoring | Built-in / Syslog / Cloud Logging | Built-in / Syslog | Built-in | Built-in / Syslog | Built-in |
| Management Options | Cloud / CLI / GUI / Centralized / REST API / SNMP | CLI / GUI / SNMP | CLI / GUI / SNMP | Cloud / CLI / GUI / SNMP | CLI / GUI / SNMP |
| Maximum Concurrent Sessions | 2 Million | 1000000 | 250,000 | N/A | N/A |
| Memory | 16 GB | 16 GB | 4 GB | 8 GB | 8 GB |
| New Sessions Per Second | 150,000 | 50000 | 8,000 | N/A | N/A |
| POE Ports | No | No | No | No | No |
| Power Source | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply |
| Product Name | ASA5585-S20-K8 | Cisco ASA 5585-X S20X-K9 Security Appliance | ASA5525-K9 | Cisco ASA5585-S10-K9 | ASA5580-20-BUN-K9 |
| Product Type | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance |
| Rack Units | 4 RU | 2 RU | 1 RU | 1 RU | 2 RU |
| Redundant Power Supply Supported | Yes | Yes | Yes | Yes | Yes |
| Routing Protocols Supported | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing |
| Security Services | Antivirus / Web Filtering / Application Control / IPS / DLP / Sandboxing / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / IPS / VPN | IPS / Antivirus / Web Filtering / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN |
| Supported Applications | 10 | N/A | N/A | N/A | N/A |
| Supported VPN Types | IPSec / SSL VPN / L2TP / PPTP / GRE | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN / L2TP | IPSec / SSL VPN |
| Switch Ports | No | No | No | No | No |
| Threat Protection Throughput | 5 Gbps | 9 Gbps | 600 Mbps | N/A | N/A |
| Use Case | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access |
| Users Supported | N/A | N/A | N/A | N/A | N/A |
| Users/Nodes | Unlimited | Unlimited | N/A | Unlimited | Unlimited |
| VPN Throughput | 6 Gbps | 12 Gbps | 1.2 Gbps | 8 Gbps | N/A |
| WAN Ports | 2 WAN | 2 WAN | 2 WAN | 2 WAN | 2 WAN |
| Weight | 50 lbs | 50 lbs | 17 lbs | 35 lbs | N/A |
| Width | 17 inches | 17.2 inches | 17.3 in | 17.3 | N/A |
Reviews & Ratings
Q
Quentin Hayes
5
Easy deployment and minimal downtime during setup.
R
Riley Carter
5
Handles moderate traffic efficiently and reliably.
S
Sienna Blake
5
Professional-grade firewall for consistent network protection.
T
Tobias Lane
5
Durable appliance with reliable enterprise-level performance.
Questions & Answers
What is the Cisco ASA5585-S20-K8?
The Cisco ASA5585-S20-K8 is a chassis-based ASA 5585-X firewall featuring the SSP20 services module, 8 Gigabit Ethernet ports, 2 SFP ports, 2 Gigabit management interfaces, and a single AC power supply.
What throughput can the ASA5585-S20-K8 deliver?
Equipped with the SSP20 module, the ASA5585-S20-K8 delivers up to 4 Gbps of firewall throughput for high-speed packet inspection and enterprise-grade security.
How many network interfaces does the ASA5585-S20-K8 provide?
It offers 8 Gigabit Ethernet ports, 2 SFP ports for fiber connectivity, and 2 dedicated Gigabit Ethernet management ports for out-of-band administration.
Which security services are supported by the SSP20 module?
The SSP20 module supports Stateful Firewall, Intrusion Prevention System (IPS), IPsec VPN, SSL VPN, and advanced threat defense capabilities.
Is the ASA5585-S20-K8 rack-mountable?
Yes, the ASA5585-S20-K8 chassis is 1U in height and includes mounting brackets for installation in standard 19-inch server racks.
What power supply does the ASA5585-S20-K8 use?
It includes a single AC power supply supporting 100–240 VAC at 50/60 Hz; an optional redundant AC power module is available for high availability.
What VPN capabilities does the ASA5585-S20-K8 support?
The unit supports up to 500 IPsec VPN tunnels and 300 SSL VPN sessions, providing secure remote access for distributed workforces.
How does the ASA5585-S20-K8 ensure high availability?
It supports Active/Standby failover and clustering, delivering seamless redundancy and load balancing to minimize downtime.
What management options are available for the ASA5585-S20-K8?
Management is available via Cisco ASDM, CLI (SSH/console), SNMPv2/v3, and centralized policy control through Cisco Security Manager.
Which encryption standards are supported by the ASA5585-S20-K8?
It supports AES-256, 3DES, and legacy DES encryption for IPsec and SSL VPN tunnels to secure data in transit.
What are the dimensions and weight of the ASA5585-S20-K8?
The chassis measures 1.72″ H × 17.5″ W × 21.5″ D and weighs approximately 12 lbs (5.4 kg), making it suitable for dense rack deployments.
Which operating system runs on the ASA5585-S20-K8?
It runs Cisco ASA OS version 9.x and above, offering integrated threat defense features and consistent policy framework.
What licensing options are available for the ASA5585-S20-K8?
Licensing tiers include Base firewall, Security Plus for advanced throughput and resiliency, and FirePOWER services for IPS, AMP, and URL filtering.
What deployment scenarios suit the ASA5585-S20-K8?
Ideal for data center edge, large campus perimeter, and service provider environments requiring scalable, high-performance security.
Can the ASA5585-S20-K8 integrate with Cisco Firepower services?
Yes, it supports upgrade paths to Firepower services for next-generation IPS, advanced malware protection, and granular application visibility.
What warranty and support options are included?
The ASA5585-S20-K8 includes a one-year limited hardware warranty and 90 days of software updates, with optional Cisco SMARTnet for 24×7 coverage and advanced replacement.