The new Cisco 5500x firewalls can be purchased now with FirePOWER services. The first thing to decide when purchasing a 5506-x is the base model. You basically have two to choose from one with wireless and one without, the difference is about $250. Once you decide that you need to figure out if you need the security plus license. This license allows for high availability and more VLAN’s. It will not be needed in most small to medium size business situations. If you need VPN access there is the clientless APEX licenses and the Anyconnect plus licenses. To give you an idea on cost the Anyconnect plus licenses, which are now yearly, they are $45 for 50 users for 1 year so it is extremely affordable.
Once you decide on your base model you can leave it at that or add the firePOWER services. The firePOWER services include URL filtering, IPS, and AMP or advanced malware protection. The TAM license sku combines these all. This is obviously a yearly subscription as well. You are basically looking at around $700/year for all three of these add-ons with a 3-year subscription. Keep in mind if you purchase firePOWER services they require a VM. This cost is roughly $400 and you must purchase the application support which is an additional $100/year.
Two PDF documents for additional explanation.