Cisco ASA5585-X-SSP60 Full Official Product Description

1. Product Overview & Model Naming Definition

Official Full Name

Model Breakdown

1. ASA: Adaptive Security Appliance, Cisco enterprise & data center next-generation firewall (NGFW) platform
2. 5585-X: Flagship high-performance modular 2RU dual-slot chassis, designed for large data center perimeters, multi-tenant service provider edge, and large enterprise campus core security deployments
3. SSP: Security Services Processor, primary compute blade integrating stateful firewall, IPsec/SSL VPN, routing, AVC application visibility & control
4. 60: Top-tier flagship performance compute module, the highest-spec SSP in the ASA 5585-X series, equipped with quad-core CPUs, maximum memory capacity, eight dedicated hardware crypto accelerators, and high-density 10G fiber uplinksCisco

Core Positioning

Discontinuation Note

2. Chassis, Hardware & Base I/O Specifications

Chassis Form Factor

• Rack unit size: Standard 2RU EIA 19-inch rack-mount chassis
• Dual module slots (non-hot-swappable SSP blades; chassis power down required for SSP replacement):
  • Slot 0 (Bottom): Mandatory primary SSP-60 firewall/VPN blade
  • Slot 1 (Top): Optional matching IPS/FirePOWER SSP-60 blade for integrated NGIPS threat defense
• Built-in dedicated out-of-band management ports: 2 independent Gigabit Ethernet management interfaces (Management 0/0, Management 0/1) for box-only administrative traffic, plus RJ45 console & auxiliary serial portCisco

Base Fixed I/O on Standalone SSP-60 Blade

• 6 × 10/100/1000BASE-T copper Gigabit Ethernet ports
• 4 × SFP+ 10 Gigabit Ethernet dual uplink fiber ports (supports 1G SFP or 10G SFP+ transceivers, transceivers sold separately)Cisco
• Total base interface count: 10 data ports
• Full dual SSP configuration (SSP-60 + IPS SSP-60): Total 20 interfaces (16 × GbE copper + 4 × 10G SFP+ fiber)Cisco

Compute, Memory & Crypto Hardware

• CPU Architecture: Quad multi-core high-performance processors (4 total CPUs) for maximum packet processing throughputCisco
• System DRAM: 24 GB onboard memory for standalone single SSP-60 chassis; expands to 72 GB total system memory when paired with matching IPS SSP-60 blade in Slot 1Cisco
• Onboard flash storage: 2 GB internal flash for ASA OS firmware, device configurations, system logs; dual SSP chassis expands total flash capacity to 4 GBCisco
• Crypto Acceleration: Eight dedicated embedded hardware crypto accelerators (the highest count among all ASA 5585-X SSP tiers) for fully offloaded AES-256, 3DES, RSA, ECC encryption and SHA hashing, eliminating general CPU resource consumption for high-volume VPN trafficCisco

Power & Thermal Design

• Standard chassis configuration: Dual load-sharing redundant AC power supply modules factory-shipped with SSP-60 units (recommended for production HA deployments)Cisco
• Fan tray design: Hot-swappable fan assembly for thermal cooling; fan tray can be replaced with a secondary power supply for fully redundant power input
• Cooling architecture: Front-to-back forced airflow, fully compatible with standard data center hot/cold aisle rack layout standards

3. Official Verified Performance Benchmarks (SSP-60 Flagship Tier)

1. Stateful firewall throughput (64-byte small packet testing): Up to 20 Gbps; cluster scaling up to 128 Gbps with 8-node ASA 5585-X SSP-60 clusterCisco
2. Standalone AVC application visibility & control throughput: 15 GbpsCisco
3. Combined integrated AVC + FirePOWER NGIPS threat defense throughput: 10 GbpsCisco
4. 3DES/AES IPsec site-to-site VPN throughput: Up to 5 Gbps
5. Maximum concurrent active TCP/UDP sessions: 4,000,000 simultaneous sessions (the maximum capacity of the entire ASA 5585-X platform lineup)Cisco
6. New TCP/UDP connection establishment rate: Up to 160,000 new sessions per secondCisco
7. Supported logical VLAN segmentation interfaces: 1,024 independent VLANs for multi-zone network isolation
8. Maximum IPsec site-to-site VPN tunnels: 10,000 persistent tunnels
9. Concurrent Cisco AnyConnect Secure Mobility SSL VPN remote workforce peers: Up to 10,000 simultaneous mobile/remote access users
10. Application identification library: Recognizes more than 3,000 distinct network applications for granular per-application bandwidth shaping, access blocking, logging and QoS policy enforcement
11. URL web filtering database: 80+ web content categories, over 280 million classified public websites for internet content control and compliance filteringCisco

4. Integrated Security & Networking Feature Suite

Core Stateful Firewall Functions

• Full stateful packet inspection (SPI) for TCP, UDP, ICMP and all standard IPv4/IPv6 network protocols
• Multi-context virtual firewall mode: Partition one physical ASA appliance into up to 250 fully isolated independent virtual firewalls for multi-tenant business unit and customer network segmentation
• Object-group ACL policy management, time-based access control rules and modular unified policy frameworks
• Comprehensive NAT services: Static NAT, dynamic PAT, large-scale carrier-grade LSN NAT, NAT64 for seamless IPv4/IPv6 dual-stack enterprise network migration

Enterprise & Service Provider VPN Encryption Services

• IPsec site-to-site VPN tunnels with AES-256, 3DES, SHA-256 encryption and hashing algorithms
• Cisco AnyConnect Secure Mobility SSL VPN for distributed remote workforce, cross-platform endpoint support for Windows, macOS, iOS, Android operating systems
• DMVPN Dynamic Multipoint VPN for hub-spoke enterprise wide-area network architectures
• Full hardware-accelerated crypto offload eliminates CPU bottlenecks under high-volume concurrent VPN tunnel traffic loads

Application Visibility & Advanced Threat Defense

• Cisco AVC (Application Visibility and Control): Deep full packet inspection to identify thousands of applications, with per-application bandwidth shaping, access blocking, event logging and granular QoS policy enforcement
• Optional FirePOWER Next-Generation IPS (NGIPS): Install matching IPS SSP-60 expansion blade in Slot1 to add intrusion prevention, advanced malware threat protection, URL web filtering, encrypted traffic inspection and global threat analytics
• Cisco Cloud Web Security integration to forward internet web traffic to cloud-based security scanning for additional malware and content compliance filtering

Routing & Dual-Stack Network Integration

• Full support for static routing, RIP v1/v2, OSPF, EIGRP, BGP dynamic routing protocols
• Integrated Routing and Bridging (IRB) for transparent firewall mode deployments
• Complete IPv4 / IPv6 dual-stack protocol support for smooth enterprise network IPv6 migration

5. Carrier-Grade High Availability Capabilities

1. Active/Standby & Active/Active Firewall Failover
   Supports dual ASA 5585-X appliances deployed as HA failover pairs for zero downtime during hardware faults, firmware upgrades or scheduled maintenance. Stateful full session synchronization preserves all active user VPN and data forwarding sessions during failover switchover.
2. ISSU In-Service Software Upgrade
   Non-disruptive ASA OS firmware upgrades across HA firewall clusters, eliminating full network security outage during operating system version updates.
3. Synchronized Configuration & Centralized Logging
   Automatic configuration synchronization between HA paired firewalls; centralized event logging support for syslog servers, Cisco Security Manager, and FireSIGHT Management Center for unified global policy control and cross-network threat reporting.

6. Physical & Environmental Specifications

SSP-60 Module Physical Dimensions

• Width: 43.69 cm (19 inches)
• Depth: 39.62 cm
• Height: 4.32 cm
• Single SSP-60 module net weight: 5.2 kg

Full Chassis Dimensions

• Chassis total size: 48.3 cm (W) × 67.3 cm (D) × 8.8 cm (H) (2RU rack height)
• Chassis weight (single SSP-60 + dual redundant power supplies): 28.2 kg

Operating Environmental Parameters

• Standard data center operating temperature range: 0°C to 40°C (32°F ~ 104°F)
• Short-term extended operating temperature: -5°C to 55°C (23°F ~ 131°F), maximum continuous runtime 96 hours, annual cumulative usage limit 15 days
• Continuous operating relative humidity: 10% – 90% non-condensing; storage & transit humidity: 5% – 95% non-condensing
• Storage & transit temperature range: -40°C to 70°C (-40°F ~ 158°F)

7. Regulatory & Global Compliance Certifications

1. Electrical Safety Standards: UL 60950-1, CSA C22.2 No.60950-1, IEC 60950, EN 60950-1
2. Laser Safety Certification: IEC/EN 60825 for front-panel SFP+ 10G optical transceivers
3. EMC & EMI Electromagnetic Compatibility: FCC Part 15 Class A, ICES-003 Class A, VCCI Class A, CISPR 22 (EN55022) Class A, CISPR 24, full EN 61000 series ESD, electrical surge, radiated & conducted immunity compliance
4. Telecom Carrier Industry Standards: NEBS Level 3 (GR-63-Core environmental protection, GR-1089-Core EMC and safety specifications)
5. Cryptographic Security Compliance: FIPS 140-2 validated cryptographic module for government, financial and regulated industry deployments
6. Environmental Directives: EU RoHS hazardous substance restriction compliance, EU WEEE waste electrical and electronic equipment recycling directive compliant

8. Key Deployment Advantages

1. Flagship Converged All-in-One Unified Security Platform
   Consolidates discrete high-throughput firewall, enterprise VPN, deep application control and optional full NGIPS threat defense onto a single compact 2RU rack appliance, drastically reducing physical rack space occupation, total power consumption and multi-device daily management overhead compared to separate standalone security hardware clusters.
2. Modular Scalable Dual-Slot Chassis Architecture
   The two-slot chassis design enables incremental capacity expansion without full hardware replacement: add matching IPS SSP-60 expansion blades to enable full integrated threat prevention, no chassis replacement required. Only identical tier SSP blades can coexist in one chassis (SSP-60 paired exclusively with IPS SSP-60).
3. Maximum-Density Hardware Crypto & Multi-Core Offloading
   Eight dedicated encryption accelerators and quad multi-core compute architecture fully offload resource-intensive VPN encryption and deep packet inspection workloads from general-purpose CPUs, maintaining consistent maximum forwarding throughput even under full comprehensive security policy enforcement and maximum concurrent subscriber load.
4. Flexible Multi-Tenant Virtualization Capability
   Multi-context virtual firewall mode enables service providers and large enterprise organizations to split one physical ASA appliance into fully isolated independent security domains for different business divisions, separate customer tenants or segmented network zones, maximizing hardware asset utilization efficiency.
5. Unified Centralized Enterprise-Grade Management
   Fully compatible with Cisco Security Manager for centralized global firewall policy administration and FireSIGHT Management Center for unified NGIPS threat visibility, event correlation and compliance reporting across distributed fleets of ASA security appliances.
6. Long-Term Investment Protection
   Fully interoperable with the complete ASA 5585-X accessory ecosystem including IPS SSP expansion blades, 1G/10G I/O expansion cards, redundant power supplies, and all compatible SFP/SFP+ optical transceivers; existing compatible hardware accessories can be fully reused during network security capacity expansion upgrades.

9. Standard Factory Packaging Contents

1. ASA 5585-X 2RU chassis pre-installed with SSP-60 main security services processor module
2. Dual factory-shipped redundant AC power supply modules
3. ESD anti-static protective transport bag for SSP compute modules
4. Standard 19-inch rack mounting brackets and all installation screws
5. Blank filler panels for unused chassis slots and empty SFP/SFP+ optical ports
6. Hardware installation quick start guide (covers rack mounting, SSP module installation procedures, front panel LED alarm status troubleshooting procedures)
7. Global regulatory compliance documentation packet (safety, EMC, NEBS, FIPS, RoHS certification documents)
8. Dual ejector lever assemblies pre-installed on the SSP module front panel for simple chassis slot insertion and removal

Supplementary UNSPSC Classification Code

Standard Hardware Warranty