ASA5555-CU-2AC-K9

ASA5555-CU-2AC-K9 High-Scale Firewall Edition

ASA5555-CU-2AC-K9 is Cisco's ASA 5555-X Firewall Edition order with 14 copper Gigabit Ethernet data ports, one copper Gigabit Ethernet management port, 1+1 AC power supplies, 3DES/AES, Active/Active high availability and two security contexts.

Documented VPN scale is 5,000 peers

The Cisco order table lists 5,000 IPsec VPN peers and two SSL VPN peers for this edition. These are platform ordering limits, not a guarantee of application performance; encrypted throughput, session mix and enabled inspection still determine usable headroom.

Distinguish the 5555 from the 5545

ASA5545-CU-2AC-K9 shares the fourteen-port dual-AC format but its published IPsec peer limit is 2,500. Keep chassis PID, serial, configuration and capacity evidence together so the two physically similar orders are not substituted accidentally.

Firewall hardware is not a service contract

Nothing in ASA5555-CU-2AC-K9 by itself proves current FirePOWER, IPS, URL filtering, AnyConnect or vendor support. Validate each software image, license and entitlement independently and omit expired services from the usable design.

Support is no longer available

Cisco lists September 4, 2020 as hardware end of sale and September 30, 2025 as last date of support. Reuse after that date should be limited by a documented security exception, spares strategy, configuration recovery test and supported-platform migration schedule.

Dual-supply acceptance test

Confirm all fourteen data ports, management, both AC supplies and failover operation. Test each PSU and input path independently, capture the installed ASA release and license state, review known vulnerabilities, and retain a verified configuration backup.

Official references: ASA5555-CU-2AC-K9 exact order description; ASA 5545-X/5555-X dual-power hardware guidance; Cisco hardware end-of-life notice.