Cisco ASA 5500-X & Firepower Firewalls
Security appliances, interface modules and spares for ASA and Firepower
About ASA & Firepower Firewalls
Cisco's firewall appliances come in two hardware generations that overlap in many networks: the ASA 5500-X series and the newer Firepower appliances. The same hardware can run different software, either the classic ASA software or Firepower Threat Defense (FTD), and that choice shapes how the device is managed and licensed.
The models in this lineup
- ASA 5506-X, 5508-X and 5516-X: branch and small-site appliances
- ASA 5512-X, 5515-X, 5525-X, 5545-X and 5555-X: rack-mount appliances for larger sites
- ASA 5585-X: the modular high-end chassis built from security service processor (SSP) modules
- Firepower 1000, 2100, 4100 and 9300: the newer Firepower hardware families
- ASA 5500 (5505, 5510, 5520, 5540): earlier appliances still found in legacy networks
Before you order
- ASA or FTD image. Part numbers ending -FTD-K9 ship configured for Firepower Threat Defense, and many of the same appliances can run ASA software. Check which image your network standardises on, because management (ASDM for ASA; Firepower Device Manager or Firepower Management Center for FTD) and licensing differ.
- Licences and support. Cisco software licences and support contracts are generally not transferable with second-hand hardware under Cisco's terms. Check with Cisco and budget for new subscriptions where your deployment needs them.
- Lifecycle. Several ASA 5500-X models have reached Cisco end of sale. Check Cisco's end-of-life notices for software and support dates before standardising on a model.
- Export class. A -K9 suffix marks strong-encryption models, which are subject to US export controls; a -K8 suffix marks the restricted-encryption variant.
Send us the part number and we will confirm the exact match.
Featured ASA & Firepower Firewalls Products
Cisco ASA-SSP-SFR10-K9 ASA 5585-X Network Security/Firewall Appliance
ASA5525-IP3Y - Cisco ASA ASA 5525-X Network Security/Firewall Appliance
ASA5515-MB - Cisco ASA ASA 5515-X Network Security/Firewall Appliance
ASA5545VPN-PM25HK9 - Cisco ASA ASA 5545-X Network Security/Firewall Appliance
ASA5545VPN-EM25HK9 - Cisco ASA ASA 5545-X Network Security/Firewall Appliance
ASA5585-S10C10XK9 - Cisco ASA ASA 5585-X Network Security/Firewall Appliance
ASA5555-K8 - Cisco ASA ASA 5555-X Network Security/Firewall Appliance
ASA5555-K7 - Cisco ASA ASA 5555-X Network Security/Firewall Appliance
ASA-SFR-40-INC-K9 - Cisco ASA 5585-X Network Security/Firewall Appliance
ASA5555VPN-EM5KK9 - Cisco ASA ASA 5555-X Network Security/Firewall Appliance
ASA5545VPN-PM1KK9 - Cisco ASA ASA 5545-X Network Security/Firewall Appliance
ASA5525VPN-PM500K9 - Cisco ASA ASA 5525-X Network Security/Firewall Appliance
ASA5512VPN-EM250K9 - Cisco ASA ASA 5512-x Network Security/Firewall Appliance
ASA5515VPN-EM250K9 - Cisco ASA ASA 5515-X Network Security/Firewall Appliance
ASA5545-FTD-BUN - Cisco ASA ASA 5545-X Network Security/Firewall Appliance
ASA5555-FTD-K9 - Cisco ASA ASA 5555-X Network Security/Firewall Appliance
ASA5545-FPWR-K8 - Cisco ASA ASA 5545-X Network Security/Firewall Appliance
ASA5555-DC-K8 - Cisco ASA ASA 5555-X Network Security/Firewall Appliance
Browse all 957 ASA & Firepower Firewalls SKUs.
Frequently Asked Questions
What is the difference between Cisco ASA and Firepower Threat Defense?
They are two software images for Cisco firewall hardware. ASA software is Cisco's long-standing firewall operating system, managed with ASDM or the command line. Firepower Threat Defense (FTD) combines firewall and next-generation threat features and is managed with Firepower Device Manager or Firepower Management Center. Many 5500-X and Firepower models can run either image.
What does -FTD-K9 mean in a Cisco ASA part number?
It identifies an appliance configured to ship with the Firepower Threat Defense image. K9 indicates strong-encryption capability, which is subject to US export controls.
Do Cisco ASA licences transfer with a used firewall?
Generally not. Under Cisco's standard terms, software licences and support contracts stay with the original purchaser. Plan for new licences or subscriptions where your deployment needs them, and confirm with Cisco for your situation.
What is the Cisco ASA 5585-X?
The ASA 5585-X is a modular chassis whose capacity is set by its security service processor (SSP) modules, such as the SSP-10 to SSP-60. It sits above the fixed 5500-X appliances in the ASA range.