ASR1002X-10G-SECK9 - Cisco ASR 1000 Aggregation Services Routers

ASR1002X-10G-SECK9 Order Identity

ASR1002X-10G-SECK9 is a physical Cisco ASR1002-X fixed-platform router bundle at the 10 Gbps software-licensed forwarding tier. It is not a standalone software license, generic ASR 1000 chassis page or guarantee of encrypted/application throughput.

Cisco's lifecycle record describes ASR1002X-10G-SECK9 as “ASR1002-X, 10G, VPN+FW Bundle, K9, AES license.”

ASR1002-X hardware facts

Cisco documents an integrated embedded services processor licensed for 5, 10, 20 or 36 Gbps, three half-height SPA slots, a built-in six-port Gigabit Ethernet SPA and hardware-based encryption capability. Interface modules, optics, cords, software rights and support must still be checked line by line on the supplied quote.

VPN and firewall security bundle boundary

The SEC code identifies the Cisco VPN plus firewall bundle family. Firewall policy, IPsec use and logging requirements must be tested together rather than inferred from the product name.

10G bounded security edge

This 10 Gbps SEC order is a physical fixed router bundle for a controlled security edge, not a generic firewall or software-only product.

Define route scale, firewall sessions, encrypted demand and logging rate, then bind those assumptions to the quoted Cisco feature entitlements.

Acceptance test

Test state creation, representative IPsec flows and audit-log continuity before setting the utilization threshold that triggers migration.

Controlled-edge workload envelope

Describe the workloads permitted through this gateway by zone, application class and recovery priority. Measure new-session rate, concurrent state, encrypted share and log volume separately, then set an operating envelope below the tested rejection point. Changes that add inspection, telemetry or tunnel scale should trigger a fresh test rather than consume undocumented headroom. Keep denied-flow samples and log delivery checks with the baseline so reviewers can prove the control remains effective after software, route-policy or interface changes. Because this is the 10G tier, define an explicit exception process for new traffic classes and require capacity approval before a branch or partner network is added.

Related ASR1002-X order records

• ASR1002X-36G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-20G-SECK9 - compare the licensed tier and bundle boundary.
• ASR1002X-10G-HA-K9 - compare the licensed tier and bundle boundary.

Lifecycle note: Cisco's ASR1002-X notice requires a current support and migration decision before acquisition or extension.

Official Cisco evidence: ASR 1000 ordering guide, ASR1002-X hardware installation guide, and ASR1002-X lifecycle notice.