Cisco recently launched new models for their Adaptive Security Appliances or ASA 5500 Series.    The new X models extend firewall performance, add new IPS capabilities, and increase the number of integrated ports; all in a compact 2RU chassis. 

The ASA 5585-X has four Security Service Processor (SSP) options with firewall throughput ranging from 4Gbps to 40Gbps.  Likewise, VPN throughput ranges from 1Gbps to 5Gbps.  However, maximum firewall connections match the older models: ASA5580-20 and ASA5580-40.  Only with the SSP-60 processor can one increase firewall connections (10,000,000). 

By adding an IPS-SSP, the ASA 5585-X has Intrusion Prevention, a service unavailable on the older models.  With the IPS capability Cisco can now compete with Juniper SRX3600 and SRX5600 (IPS performance 10Gbps and 15Gbps respectively). However, given the price point of the ASA 5585-X w/ SSP-60 Juniper still maintains a significant price performance advantage.  Pricing on the ASA5585-X runs from $29,995 on the ASA5585-S10 to an expensive $224,995 on the ASA5585-S60.

Unless IPS is a requirement, the ASA5580-20 and ASA5580-40 remain a viable option to the new X series especially given the hardware costs.  Cisco has no current plan to EOL these high end ASA 5500 models.  Of course, the Juniper SRX security gateway represents an exceptional alternative.