Cisco ASA5508-X Series Firewalls - Refurbished, Used, New

Best Selling

The Cisco ASA 5508-X is a 1RU rack-mount firewall with FirePOWER services, built for branch offices, small and mid-sized businesses and retail sites that want stateful firewalling, site-to-site and remote-access VPN, and next-generation inspection on the same box. It has eight 1G RJ45 data ports plus a dedicated management port, and runs either the classic ASA software image or Firepower Threat Defense (FTD), which is why you will see two part numbers for the same hardware. NetworkTigers sells ASA 5508-X firewalls and the rack mount bracket kit refurbished, used and new. Every firewall is tested before it ships so it boots, passes traffic and takes a configuration when it arrives.

ASA 5508-X parts

Part	What it is	Shop
ASA5508-K9	ASA 5508-X with FirePOWER services, shipped with the ASA software image. 8x 1G RJ45 ports, 1 Gbps class firewall throughput.	ASA5508-K9
ASA5508-FTD-K9	Same hardware loaded with the Firepower Threat Defense image, managed by Firepower Management Center or Firepower Device Manager.	ASA5508-FTD-K9
ASA5508-BRACKET	Rack mount bracket kit for a 19-inch rack. The chassis does not include rack ears, so order this if the unit is going in a rack rather than on a shelf.	ASA5508-BRACKET
Interfaces	8x 1G RJ45 data ports, 1x RJ45 management port, console and USB. No SFP ports on this model.	ASA5508-K9 \| ASA5508-FTD-K9
All ASA 5508-X listings	Every chassis and bracket on the page, refurbished, used and new	ASA5508
Related Cisco security	The next size up and the newer platforms	ASA 5516-X \| Firepower 1000 \| Firepower 2100 \| All Cisco firewalls

Which ASA 5508-X do I need?

Choose by the software you plan to run. If your team manages firewalls with ASDM or the ASA command line and you want the FirePOWER module for IPS and malware inspection on the side, the ASA5508-K9 is the natural fit. If you run Firepower Management Center or want a single unified policy with the newer FTD code, the ASA5508-FTD-K9 arrives with that image already loaded. The hardware is identical, and either image can be reloaded on either unit, so the part number mainly saves you an image conversion. Count your interfaces: eight 1G copper ports cover an outside, an inside, a DMZ and several spare segments, but there is no fiber option, so a fiber handoff needs a media converter or a switch in front. For throughput above roughly 1 Gbps or for a 10G uplink, look at the ASA 5516-X or the Firepower 1000 and 2100 lines instead. Threat, malware and URL filtering subscriptions are not included with a used or refurbished unit and are arranged separately.

Frequently asked questions

What does "No Clock Issue" mean in a listing?
Some early ASA 5508-X units were built with a clock signal component that could fail after several years in service. Units we list as "No Clock Issue" are from later production that does not use the affected component. Ask if you need the serial number range checked before you order.

Does a used ASA 5508-X come with its solid state drive?
The internal SSD is required for FirePOWER services and FTD. Our listings state whether the drive is installed; if a unit you want is listed without one, ask and we will tell you what is available.

Can I convert an ASA5508-K9 to FTD myself?
Yes. The conversion is a reimage from ROMMON over TFTP, and the same path works in reverse. We can also ship the unit with the image you want loaded.

NetworkTigers has sold enterprise network equipment since 1996. Every firewall carries the NetworkTigers 365-day warranty. Need a pair for high availability? Ask us for a quote.