topic Re: Cisco ASA 5506-X no more bug fixes and security updates? in Network Security

Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Thu, 20 Jul 2023 18:32:09 GMT

Can someone please confirm if the Cisco ASA 5506-X is already obsolete? I've been looking around online and i can tell is already End-Of-Life, but can't really tell whether or not won't receive any security updates or bug fixes anymore.

This is how most of my ASA's have:

Cisco Adaptive Security Appliance Software Version 9.12(4)26
Name: "Chassis", DESCR: "ASA 5506-X with SW, 8GE Data, 1GE Mgmt, AC"
PID: ASA5506 , VID: V07 , SN:

Re: Cisco ASA 5506-X no more bug fixes and security updates?

MHM Cisco World — Thu, 20 Jul 2023 18:43:26 GMT

You are correct. asa 5506 is EoL

Re: Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Thu, 20 Jul 2023 18:45:10 GMT

Thank you. But can someone confirm if no more security fixes and bug fixes are being released for it?

Re: Cisco ASA 5506-X no more bug fixes and security updates?

Rob Ingram — Thu, 20 Jul 2023 18:47:29 GMT

@m4k3rz ASA 9.16 is the final software version supported for the 5506. https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html the latest version 9.16.4 was released Oct 2022, 9.16 doesn't appear to have an EOL yet.

Ideally you should look to replace the 5506 hardware with a FPR1010 at a minimum.

Re: Cisco ASA 5506-X no more bug fixes and security updates?

MHM Cisco World — Thu, 20 Jul 2023 19:21:15 GMT

Sorry no more

You need to use 5506 with last ver.

Or replace with fpr1k or fpr2k.

Re: Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Thu, 20 Jul 2023 20:40:11 GMT

thank you both. I understand now that ASA 9.16(x) was the final version for the ASA 5506-X. However, does it say anywhere when will that version be dated/obsolete ?

Re: Cisco ASA 5506-X no more bug fixes and security updates?

Rob Ingram — Fri, 21 Jul 2023 06:55:45 GMT

@m4k3rz there is no announcement of EOL for 9.16, however 9.16 is an Extra Long Term release and according to the guide below 9.16 should receive software maintenance updates until 2025. https://www.cisco.com/c/en/us/products/collateral/security/firewalls/bulletin-c25-743178.html

As 9.16 is the latest version for your hardware you obviously will not receive any new features of functionality. To gain more functionality and features you'd need to replace the hardware, the direct replacement for the 5506 is the Firepower 1010, which supports the latest ASA software image (currently 9.19) or the NGFW image FTD.

Re: Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Fri, 21 Jul 2023 16:26:47 GMT

Thank you. does the "software maintenance updates" includes security updates?

Re: Cisco ASA 5506-X no more bug fixes and security updates?

Rob Ingram — Fri, 21 Jul 2023 16:34:04 GMT

@m4k3rz general bug and security related fixes

Re: Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Fri, 21 Jul 2023 19:35:45 GMT

Thanks so much Rob!

Re: Cisco ASA 5506-X no more bug fixes and security updates?

m4k3rz — Mon, 29 Jan 2024 19:56:38 GMT

Thanks Rob, I was going over the link you posted https://www.cisco.com/c/en/us/products/collateral/security/firewalls/bulletin-c25-743178.html but i can't find where specifically it says 9.16 should receive updates until 2025. Could you please point out where that is said? I've read the document and can't figure it out. Thank you

Re: Cisco ASA 5506-X no more bug fixes and security updates?

Rob Ingram — Mon, 29 Jan 2024 20:24:14 GMT

@m4k3rz in that link provided, it states 9.16 is an XLTR (Extra Longterm Release).

Under the Software Release Schedule it states "The Cisco FTD 6.4 and ASA 9.12 Releases are the first XLTRs that will adhere to the guidelines presented here, as shown in Figure 2."

So if 9.12 is the first XLTR then 9.16 is the second XLTR (the last in the figure above) - so EoSW CY25 H1