Cisco launched the ASA 5500 family in May 2005 as the successor to its PIX firewalls, and the 5505 was the small desktop member. It's a firewall with an eight-port 10/100 switch built in, two of those ports carry PoE, and there's a slot for a Security Services Card. Licensing is what separates one listing from the next. The Base license allows three VLANs in routed mode, one of them a restricted DMZ, with no trunks or failover. Security Plus raises that to 20 VLANs and eight trunks and adds active/standby failover. The user count of 10, 50 or unlimited is a separate license on either one, and Cisco ties every license to the serial number. It's a cheap way to practice the classic ASA command line on real hardware. Cisco stopped selling it in August 2017, ended support in August 2022 and pointed buyers to the 5506-X.
ASA5505-BUN-K9 (10-user Base bundle)ASA5505-50-BUN-K9 (50-user bundle)ASA5505-UL-BUN-K9 (unlimited-user bundle)ASA5505-SEC-BUN-K9 (unlimited-user Security Plus bundle)ASA 5506-X, the model that replaced it
Base gets 3 VLANs in routed mode (one is a restricted DMZ), no trunks, no failover and 10 IPsec VPN peers. Security Plus raises that to 20 VLANs, 8 trunks, 25 IPsec peers and active/standby failover. The user count (10, 50 or unlimited inside hosts) is a separate license on both. Cisco ties the activation key to the serial number, and its feature licenses can't move between devices.
Software and support
It runs Cisco ASA Software, and Cisco's ASA 9.2 configuration guide still covers it. Wikipedia says the final software for the 5505 came out in 2014. Cisco stopped selling it on August 25, 2017 and support ended on August 31, 2022.
Fans and power
It runs from an external AC supply. Cisco quotes 20 W steady state and 96 W peak, and 60 dBA as the maximum acoustic noise.
PoE
Two of the eight switch ports provide PoE, for a phone or access point. Cisco's datasheet doesn't give a per-port wattage.
Ports and optics
All eight ports are 10/100 copper, with no SFP. There's one expansion slot for a Security Services Card and three USB 2.0 ports.
Reset and console
It has one RJ-45 console port. Ask the seller to wipe the config, or plan on a console session to reset it.
Should come with it
External AC power supply
RJ-45 console cable
Rack-mount kit (optional)
Check the listing photos against this list, and ask the seller about anything you can’t see. A missing piece should come off the price.
What to check
Most trouble is the license, not the hardware. A Base unit with a 10-user limit is the common surprise, so check show version before you buy.
01License: Ask for a photo of show version. It should show the license and user count the listing claims.
02Security Plus: Look for Security Plus in that output if you want trunks or failover. Base stops at three VLANs.
03User count: Check the inside-hosts limit in show version. Unlimited or 50 is what you want for a busy lab.
04Serial: Match the serial in show version to the label in the photos. The license is tied to it and can't be moved.
05Power supply: Check the photos for the external power brick. Without it the unit won't run.
06PoE ports: Ask whether the PoE ports have powered a device. A phone or access point should light up on them.
07Console: Look for the RJ-45 console cable in the photos. On arrival, a console session should show the boot messages.
08Config: Ask the seller to wipe the config before shipping. A clean unit won't ask for the old enable password.
We'd buy russ-t's ASA 5505 at $30 delivered, because the photo shows Cisco's external power adapter beside it and the unit won't run without one. There are at least 196 for sale, most asking $25 to $55 delivered, and several of the cheapest are unit only or titled no AC adapter, so check the photos for the brick. The license decides what you get, since Base stops at three VLANs with no trunks or failover while Security Plus allows 20 VLANs, 8 trunks and failover, and Cisco ties it to the serial, so ask for a show version photo before you trust waakif's SEC Plus title or platinumbusiness's unlimited users. Cisco ended support in August 2022 and the last software for it came out in 2014, so keep it on the lab bench for learning the ASA command line and off your internet connection.
Listed now
196
For parts
0
Typical ask
$25–$55
Full range
$10–$150
★Cheapest
$16.00delivered
The lowest delivered ASA 5505 from a seller with feedback, but it's titled unit only, so you'll need Cisco's external power adapter before it runs. No license is named, so assume Base until show version says otherwise.
Cisco ASA 5505 V13 Fast Ethernet Firewall Security Appliance, Unit Only
Delivered prices include shipping as eBay quoted it to a US address on Oct 15, 2026. Many sellers charge by distance, so your total may differ. eBay shows yours before you pay.
Snapshot
For sale on eBay
8 of 196 listed
Checked . Some may have sold.
Delivered prices include shipping as eBay quoted it to a US address on Oct 15, 2026. Many sellers charge by distance, so your total may differ. eBay shows yours before you pay.
Used
★Cheapest
Cisco ASA 5505 V13 Fast Ethernet Firewall Security Appliance, Unit Only
$16.00delivered
$16.00 · free shipping
Buy It Now$16.00
Offers accepted+
This seller takes offers, and many sellers accept less than the asking price.
Fine if you might miss it? Send an offer first. Someone else can still buy it while you wait for a reply.