ASR1002X-5G-SECK9 - Cisco ASR 1000 Series Aggregation Services Routers

ASR1002X-5G-SECK9 Purchase Identity

ASR1002X-5G-SECK9 is a physical ASR1002-X 5G VPN and firewall bundle. Cisco's exact order description is “ASR1002-X, 5G, VPN+FW Bundle, K9, AES license.”

Verified hardware or bundle facts

Cisco describes this exact PID as a physical ASR1002-X at the 5 Gbps licensed forwarding tier with VPN and firewall bundle rights, K9 image and AES license. Routing, IPsec and firewall functions must be treated as one tested service mix.

What this PID does not mean

SEC does not mean a generic next-generation firewall and does not include every security service. The entitlement record and IOS XE release control the available VPN/firewall functions; external inspection, analytics or subscriptions remain separate unless quoted.

Lifecycle decision

Cisco's ASR1002-X lifecycle notice lists July 31, 2027 as the last support date. Security-policy migration and audit-log continuity need a funded successor plan before production acceptance.

Combined security workload envelope

Define permitted zones, route scale, concurrent state, new-session rate, encrypted share and log volume. Replay allowed, denied and encrypted flows together, then set an operating limit below the first rejected or unstable condition.

Policy and evidence continuity test

Match the 5 Gbps performance, VPN/firewall, K9 and AES rights to the serial and Cisco account. Export the policy and configuration, test audit-log timestamps through a controlled restart, and document how each security object translates to the successor platform.

Related Cisco ASR 1000 records

• ASR1002X-5G-HA-K9 - compare the exact hardware, interface or entitlement boundary.
• ASR1002X-5G-VPNK9 - compare the exact hardware, interface or entitlement boundary.
• ASR1001-HDD - compare the exact hardware, interface or entitlement boundary.

Official Cisco evidence: Cisco ASR1001-X and ASR1002-X lifecycle notice and Cisco ASR 1000 ordering guide.