Cisco ASA 5520 Adaptive Security Appliance, 1U Firewall, 4-Port Gigabit Ethernet, 2GB RAM: This is a Cisco ASA 5500-series 1U rack-mount security appliance providing stateful firewall, VPN concentrator, and IPS-ready services for SMB and enterprise edge deployments. Model ASA 5520. This is a dedicated security appliance, not a router, switch, or general-purpose server. This is a refurbished unit, fully tested.
Engineering Context
The ASA 5520 is rated by Cisco at 450 Mbps stateful firewall throughput, 225 Mbps 3DES/AES VPN throughput, 9,000 connections per second, and up to 280,000 concurrent connections. It supports up to 750 IPSec VPN peers and 100 VLAN-tagged virtual interfaces. RAM is 2 GB and flash is 256 MB. The chassis is 1U rack-mount, dimensions 44.5 x 33.5 x 4.4 cm, weight approximately 9.1 kg. One expansion slot accepts an SSM (Security Services Module) for IPS or content security functionality.
Deployment & Use Cases
SMB and mid-size enterprise internet edge with stateful firewall and site-to-site IPSec VPN. Branch-office concentrator for remote-access SSL VPN (limited to 2 SSL VPN peers without additional licensing). Network segmentation between security zones using VLAN sub-interfaces. Lab and training environments for Cisco ASA configuration, ACL design, and VPN troubleshooting practice.
Technical Specifications
- OEM: Cisco
- Model: ASA 5520
- Form Factor: 1U Rack-Mount
- Firewall Throughput: 450 Mbps (stateful)
- VPN Throughput: 225 Mbps (3DES/AES)
- Concurrent Connections: 280,000
- IPSec VPN Peers: Up to 750
- VLANs: Up to 100
- Interfaces: 4 x Gigabit Ethernet plus 1 x Management 10/100
- Expansion: 1 SSM slot
- RAM / Flash: 2 GB / 256 MB
- Condition: Refurbished — Tested by T.E.S IT-SOLUTIONS
Compatibility & Hard Constraints
The ASA 5520 has reached End-of-Life and End-of-Support per Cisco; new TAC software updates are not available. Refurbished units are recommended for lab, non-production, or controlled production roles where vendor support is not required. Maximum supported software is Cisco ASA 8.4(x); not compatible with newer ASA 9.x feature sets that require successor platforms (ASA 5500-X series or Firepower). SSL VPN peers are limited to 2 by default; additional peers require AnyConnect or Premium licenses, sold separately. Power input is internal universal AC PSU; not a DC unit despite older spec sheets that list 48 V references.
Why Choose T.E.S IT-SOLUTIONS
T.E.S IT-SOLUTIONS tests every ASA 5520 for boot diagnostics, all four GbE interfaces, console access, and ASA software boot. We provide 1–3 day handling time, EU shipping, and post-sale technical support for ASA configuration questions.

