ASA5585S60-10K-K9

ASA5585S60-10K-K9 SSP-60 10K VPN Bundle

ASA5585S60-10K-K9 is the SSP-60 version of Cisco's historical 10K SSL/IPsec VPN Edition. Its original order includes firewall services, 10,000 IPsec VPN peers, 10,000 Premium VPN peers and 3DES/AES capability.

Higher SSP-60 capacity

Cisco documents up to 40 Gbps maximum stateful inspection, 20 Gbps multiprotocol inspection, 10 million concurrent firewall connections, 350,000 new connections per second and 5 Gbps maximum 3DES/AES IPsec VPN throughput. Capacity validation must still reproduce the intended packet mix, policy and VPN workload.

Two-AC exact bundle record

Cisco's exact PID notice identifies six Gigabit Ethernet data interfaces, four 10 Gigabit Ethernet interfaces, two management interfaces and two AC power supplies with SSP-60. The lower ASA5585S40-10K-K9 exact order lists one AC PSU and materially lower processing limits, so receiving must preserve the complete PID rather than collapsing both to “ASA 5585-X 10K.”

Prove usable VPN licensing

The 10K suffix describes the original Premium/SSL entitlement package; it is not evidence that a second-hand unit has current Secure Client rights or support. Capture serial, ASA release, activation key, running license output, user-session limit and migration records. Do not advertise current 10,000-user usability from the historical part number alone.

Retired platform controls

The exact AnyConnect bundle stopped selling on June 1, 2015. Cisco later ended sale of ASA 5585-X hardware on June 1, 2018 and ended platform support on May 31, 2023. Any continued deployment needs documented risk acceptance, offline recovery media, spare coverage, vulnerability review and a Firepower 4100 or other approved migration design.

Official sources: Cisco ASA 5585-X data sheet, Cisco exact 10K VPN bundle notice and Cisco ASA 5585-X platform lifecycle notice.