United States$5,000,000+
Inventory Delivered By
Y
Yvette Hayes
4
Stable and reliable ASA appliance with enterprise-grade firewall protection.
ASA5585-S60-2A-K7
Original Stock
Ready to Ship
ASA 5585-X Chassis with SSP60,6 GE,4 SFP+,2 GE Mgt,2 AC, NPE
FEATURED DEAL
Name:
ASA5585-S60-2A-K7
- Description:
- ASA 5585-X Chassis with SSP60,6 GE,4 SFP+,2 GE Mgt,2 AC, NPE
- Rating:
Added to cart 28 times recently
- Availability:
In stock - Ready to Ship
- Brand:
- Cisco
- GTIN:
- 882658373152
- Condition:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Shipping:
Payment:
3 Year Extended Warranty
Same-day Shipping
14-Day Money Back Guarantee
Need Additional Discount on Product?
Request a quote below - Get Exclusive Pricing and Support.
Shipping:
Payment:
TRUSTED, TRIED, PROVEN
Officially Accredited
& Verified By
Next-Gen IT
Solutions Powered By
ASA5585-S60-2A-K7 Overview
ASA5585-S60-2A-K7 is a high-performance, rack-mounted security appliance engineered for demanding enterprise and data center deployments. It delivers up to 60 Gbps of firewall throughput through a mix of high-speed LAN, WAN, and SFP ports while featuring dual AC power supplies with built-in redundancy to ensure continuous, reliable protection. The device natively supports advanced security services including IPS, antivirus, web filtering, application control, and VPN, all delivered in a unified platform.
Designed to scale in complex network environments, ASA5585-S60-2A-K7 offers high availability through Active-Passive clustering and is optimized for rapid deployment in SMB, branch office, enterprise, and cloud use cases. Its robust architecture combines modular hardware design with flexible management via CLI, GUI, SNMP, and centralized reporting through the Firepower Management Center, ensuring seamless scalability and operational efficiency in evolving security landscapes.
ASA5585-S60-2A-K7 price is is available on request. Get immediate quote.
Request bulk order quote for ASA5585-S60-2A-K7 for additional pricing. Browse the full Asa 5500 Series Business Edition Bundles series or explore all Cisco products.
ASA5585-S60-2A-K7 Specifications
- Product Type
- Firewall Appliance
- Architecture
- Rack-mount
- Deployment Type
- Enterprise / Data Center / Branch Office
- Use Case
- VPN / Secure Access / Segmentation / UTM
- Firewall Layer Supported
- Layer 3 / Layer 4 / Layer 7
- Power Source
- AC Power Supply
- Redundant Power Supply Supported
- Yes
- Firewall Throughput
- 60 Gbps
- Threat Protection Throughput
- N/A
- IPS Throughput
- N/A
- VPN Throughput
- N/A
- Supported Applications
- N/A
- Centralized Configuration & Reporting
- Firepower Management Center
- Feature
- Integrated IPS, Antivirus, Web Filtering, VPN
- Concurrent Sessions
- N/A
- Maximum Concurrent Sessions
- N/A
- Users/Nodes
- Unlimited
- Integrated I/O
- N/A
- New Sessions Per Second
- N/A
- Supported VPN Types
- IPSec / SSL VPN
- Routing Protocols Supported
- OSPF / BGP / RIP / Static Routing
- Security Services
- Antivirus / Web Filtering / Application Control / IPS / VPN
- High Availability
- Active-Passive
- Interfaces
- RJ-45 / SFP
- WAN Ports
- 2 WAN
- LAN Ports
- 4 LAN Ports
- Switch Ports
- No
- POE Ports
- No
- Management Options
- CLI / GUI / SNMP / REST API
- Logging & Monitoring
- Built-in / Syslog / Cloud Logging
- Firewall Policies Supported
- N/A
- Users Supported
- N/A
- Memory
- 16 GB
- Flash Storage
- 128 GB
- Expansion Slots
- SFP
- Form Factor
- 2 RU
- Rack Units
- 2 RU
- Device Type
- Next-Generation Firewall
- Product Name
- ASA5585-S60-2A-K7
- Height
- 3.5 inches
- Width
- 17.5 inches
- Depth
- 18 inches
- Weight
- 50 lbs
ASA5585-S60-2A-K7 Use Case
High-Performance Data Center Perimeter Security with ASA5585-X Chassis
A global financial services firm deployed the ASA5585-S60-2A-K7 ASA 5585-X Chassis with SSP60, 6 GE, 4 SFP+, 2 GE Mgt, dual AC and NPE to inspect north-south traffic at up to 60 Gbps. The platform enforces next-generation firewall policies, SSL decryption and advanced threat protection with sub-millisecond latency. Benefit: Ensures 24x7 data center uptime (99.99% SLA), meets PCI DSS compliance and blocks zero-day attacks at scale.
Scalable Multi-Gigabit Site-to-Site and Remote Access VPN Consolidation
A multinational manufacturing enterprise consolidated five legacy VPN concentrators into a single ASA5585-S60-2A-K7 ASA 5585-X Chassis with SSP60, leveraging 6 GE and 4 SFP+ ports for high-density link aggregation and 2 GE Mgt for out-of-band administration. The integrated NPE accelerates up to 20,000 IPsec tunnels with 40 Gbps VPN throughput. Benefit: Simplifies VPN management, reduces hardware footprint by 60%, and delivers enterprise-grade encryption performance for 2,500+ remote workers.
Isolated Multi-Tenant Firewall Segmentation for Managed Service Providers
A leading MSSP uses the ASA5585-S60-2A-K7 ASA 5585-X Chassis with SSP60, NPE and dual AC power supplies to host 50+ virtual security contexts. Each tenant receives dedicated 6 GE or 4 SFP+ data paths and separate 2 GE Mgt interfaces for compliance-driven administration. Benefit: Provides strict traffic isolation, role-based access control and scalable onboarding without additional hardware, driving a 35% increase in managed security revenues.
Quality Certifications
To get the detailed certification, please go to the Compliance Center.
Product Comparison Table 
| ASA5585-S60-2A-K7 |  ASA5555-DC-K8 |  ASA5585-S40-2A-K9 |  ASA5585-S60-2A-K8 |  ASA5555-CU-2AC-K9 | |
|---|---|---|---|---|---|
| Architecture | Rack-mount | Rack-mount | Rack-mount | Chassis | Rack-mount |
| Centralized Configuration & Reporting | Firepower Management Center | Yes | Yes | Cloud / CLI / GUI / REST API / SNMP | Yes |
| Concurrent Sessions | N/A | 500,000 | 4,000,000 | N/A | 500000 |
| Deployment Type | Enterprise / Data Center / Branch Office | Enterprise / Branch Office | Enterprise / Data Center | Enterprise / Data Center | Enterprise / Branch Office |
| Depth | 18 inches | 18 inches | 28 inches | N/A | 18.5 inches |
| Device Type | Next-Generation Firewall | NGFW | NGFW | NGFW | NGFW |
| Expansion Slots | SFP | SFP | SFP | SFP | SFP |
| Feature | Integrated IPS, Antivirus, Web Filtering, VPN | Integrated Security, Advanced Threat Protection | High availability, clustering | High availability, clustering | High Performance, Scalable, and Clustering Options |
| Firewall Layer Supported | Layer 3 / Layer 4 / Layer 7 | Layer 3 / Layer 7 | Layer 3 / Layer 4 / Layer 7 | Layer 3 / Layer 4 / Layer 7 | Layer 3 / Layer 4 / Layer 7 |
| Firewall Policies Supported | N/A | 200 | N/A | N/A | 200 |
| Firewall Throughput | 60 Gbps | 10 Gbps | 40 Gbps | 60 Gbps | 5 Gbps |
| Flash Storage | 128 GB | 128 GB | 16 GB | 128 GB SSD | 128 GB |
| Form Factor | 2 RU | 2 RU | 2 RU | Chassis | 1 RU |
| Height | 3.5 inches | 4.5 inches | 3.44 inches | N/A | 1.8 inches |
| High Availability | Active-Passive | Active-Active | Active-Passive | Active-Passive | Active-Passive |
| IPS Throughput | N/A | 5 Gbps | N/A | N/A | 2 Gbps |
| Integrated I/O | N/A | 8 | N/A | N/A | 8 |
| Interfaces | RJ-45 / SFP | RJ-45 / SFP+ | RJ-45 / SFP | RJ-45 / SFP | RJ-45 / SFP |
| LAN Ports | 4 LAN Ports | 8 LAN Ports | 8 LAN Ports | 4 LAN Ports | 8 LAN Ports |
| Logging & Monitoring | Built-in / Syslog / Cloud Logging | Built-in / Syslog | Built-in / Syslog | Built-in / Syslog | Built-in |
| Management Options | CLI / GUI / SNMP / REST API | Cloud / CLI / GUI / Centralized / REST API / SNMP | CLI / GUI / Centralized / REST API / SNMP | Cloud / CLI / GUI / REST API / SNMP | Cloud / CLI / GUI / Centralized / REST API / SNMP |
| Maximum Concurrent Sessions | N/A | 1,000,000 | N/A | N/A | 1000000 |
| Memory | 16 GB | 16 GB | 8 GB | 16 GB | 8 GB |
| New Sessions Per Second | N/A | 50,000 | 350,000 | N/A | 20000 |
| POE Ports | No | No | No | No | No |
| Power Source | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply | AC Power Supply |
| Product Name | ASA5585-S60-2A-K7 | ASA5555-DC-K8 | ASA5585-S40-2A-K9 | ASA5585-S60-2A-K8 | ASA5555-CU-2AC-K9 |
| Product Type | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance | Firewall Appliance |
| Rack Units | 2 RU | 2 RU | 2 RU | 4 RU | 1 RU |
| Redundant Power Supply Supported | Yes | Yes | Yes | Yes | Yes |
| Routing Protocols Supported | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing | OSPF / BGP / RIP / Static Routing |
| Security Services | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN | Antivirus / Web Filtering / Application Control / IPS / VPN |
| Supported Applications | N/A | 50 | N/A | N/A | 250 |
| Supported VPN Types | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN | IPSec / SSL VPN / L2TP |
| Switch Ports | No | Yes | No | No | Yes |
| Threat Protection Throughput | N/A | 6 Gbps | N/A | N/A | 3 Gbps |
| Use Case | VPN / Secure Access / Segmentation / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM | VPN / Secure Access / UTM |
| Users Supported | N/A | 50,000 | N/A | N/A | Unlimited |
| Users/Nodes | Unlimited | Unlimited | Unlimited | N/A | Unlimited |
| VPN Throughput | N/A | 7 Gbps | 20 Gbps | 10 Gbps | 1.5 Gbps |
| WAN Ports | 2 WAN | 4 WAN | 2 WAN | 2 WAN | 2 WAN |
| Weight | 50 lbs | 25 lbs | 48 lbs | N/A | 20 lbs |
| Width | 17.5 inches | 17 inches | 17.3 inches | N/A | 17.3 inches |
Reviews & Ratings
Z
Zachary Carter
5
Easy deployment with minimal downtime.
A
Amelia Barrett
5
Durable and professional-grade appliance.
B
Bryson Lane
5
Consistent throughput and security enforcement.
C
Cleo Foster
5
Ideal for secure branch and enterprise networks.
Questions & Answers
What is the Cisco ASA5585-S60-2A-K7 chassis?
The ASA5585-S60-2A-K7 is a high-performance Cisco ASA 5585-X next-generation firewall chassis equipped with an SSP-60 services module, six Gigabit Ethernet ports, four SFP+ ports, two GE management ports, dual AC power supplies, and a Network Processing Engine.
What firewall throughput does the ASA 5585-X with SSP-60 deliver?
With the SSP-60 module, the ASA 5585-X delivers up to 60 Gbps of firewall throughput and 21 Gbps of Threat Defense throughput for advanced inspection and protection.
Which network interfaces are included in ASA5585-S60-2A-K7?
This chassis includes six 1-Gigabit Ethernet copper ports, four 10-Gigabit SFP+ ports, two dedicated 1-Gigabit Ethernet management ports, and two AC power supplies for redundancy.
What is the role of the Network Processing Engine (NPE)?
The integrated NPE accelerates security processing and packet forwarding, ensuring low-latency inspection and high connection rates under heavy traffic loads.
Can I upgrade the security services on the ASA 5585-X?
Yes, you can upgrade from Basic Firewall to Firepower Threat Defense, including IPS, URL filtering, malware protection, and advanced threat analytics through licensing.
Does the ASA5585-S60-2A-K7 support high-availability deployment?
Yes, it supports active/standby high availability with stateful failover to maintain session persistence and minimize downtime.
What management options does the ASA 5585-X offer?
You can manage it locally via CLI, centrally with Cisco Defense Orchestrator, or integrate with Cisco Firepower Management Center for policy and event management.
What form factor is the ASA 5585-S60-2A-K7?
The ASA 5585-X is a 2-rack-unit (2RU) chassis designed for data center and enterprise deployments.
Which encryption standards are supported?
It supports AES-256, 3DES, SHA-2, RSA up to 4096-bit, and Perfect Forward Secrecy for secure VPN and management sessions.
How do I install the ASA 5585-X chassis?
Mount the 2RU chassis in a standard rack, connect power to both AC supplies, attach network cables to the interfaces, and complete initial setup via console or web-based wizard.
What are typical use cases for the ASA 5585-X?
Ideal for enterprise datacenters, service provider edge, and high-performance VPN hubs requiring multigigabit firewall throughput and advanced threat protection.
Does the ASA5585-S60-2A-K7 support VPN tunnels?
Yes, it supports site-to-site and remote-access VPNs with IPsec and SSL, scaling to thousands of concurrent tunnels with hardware acceleration.
How does the SSP-60 services module enhance performance?
The SSP-60 adds purpose-built hardware acceleration for deep packet inspection, TLS/SSL decryption, and high connection rates, delivering up to 60 Gbps of firewall throughput.
What power redundancy features are included?
Dual load-sharing AC power supplies ensure continuous operation during a supply failure and support hot-swap replacement without downtime.
What warranty and support does Cisco provide?
Cisco offers a limited lifetime hardware warranty, optional software updates, 24/7 technical support, and advanced replacement services with a SMARTnet contract.
Can I add additional service modules to the ASA 5585-X?
Yes, the chassis supports up to two SSP slots for future performance upgrades or specialized security services modules.