topic Re: ASA firewall in Network Security

ASA firewall

Abdul salaam — Sat, 23 Sep 2023 11:55:58 GMT

Hello Guys

What is the last product of ASA firewall ? When the ASA is going to be end of life forever.

Cheers

Re: ASA firewall

MHM Cisco World — Sat, 23 Sep 2023 12:09:11 GMT

Asa 5506 eol is 2026

So go for fpr 1000 or 2000 is better

Re: ASA firewall

Blue_Bird — Sat, 23 Sep 2023 13:02:28 GMT

I grew up with Cisco ASA (and PIX) :). One of the legends about it was that once you deploy ASA you could just forget the firewall issues. That was a legend of ASA stability. Good old ASAs then transformed into Next-Generation firewalls. ASA 5500-X with the SFR modules became popular after the acquisition of Source Fire by Cisco Systems. After a few years of the ASA X series popularity, Firepower appliances appeared on the horizon.

What next? Cisco used to propose migration options for the EoL hardware lines. For the popular models, Cisco suggests:

5506, 5508, 5512, 5515, 5516 -> Cisco Firepower 1000 models
5525, 5545, 5555 -> Cisco Firepower 2100 models
5585-X -> Cisco Firepower 4100 models

I hope the above information is useful....

Thanks

Re: ASA firewall

M.Sultan — Sat, 23 Sep 2023 19:50:07 GMT

Thank you very much...

means cisco replaces ASA by the Cisco firewall power ?

5506, 5508, 5512, 5515, 5516 -> Cisco Firepower 1000 models
5525, 5545, 5555 -> Cisco Firepower 2100 models
5585-X -> Cisco Firepower 4100 models

Re: ASA firewall

Karsten Iwen — Sat, 23 Sep 2023 20:57:03 GMT

The typical confusion is caused by the fact that ASA and Firepower are both a hardware platform and software. The ASA hardware is going away, but on the firepower hardware you can run both the ASA or the Firepower software depending on your needs.

Re: ASA firewall

M.Sultan — Sat, 23 Sep 2023 22:35:04 GMT

In this case only the hardware product is going away from the market and still we can run the ASA ios into Firepower product ?

Re: ASA firewall

Blue_Bird — Sun, 24 Sep 2023 09:57:17 GMT

Yes....

Cisco Firepower models are Next Generation Firewalls....more powerfull and supports more advanced features...than Cisco ASA.

Thanks

Re: ASA firewall

Marvin Rhoads — Sun, 24 Sep 2023 04:37:56 GMT

ASA software is continuing development with no plans to make it End of Life. All ASA hardware appliances are past end of sales and many are end of support / end of life.

You can run ASA software on any Cisco Secure firewall hardware appliance (1000 through 9000 series) as well as ASAv (virtual) appliance form factor both on-premises on your own hypervisor or in public cloud. In all those cases you won't get any Next Generation Firewall (NGFW) features (Security Intelligence, IPS, Identity integration, URL category filtering, Malware protection etc.). However, the classic ASA features are all there. One exception is clientless SSL VPN which is discontinued on all current ASA versions. Customers with that requirement should consider Duo Access Gateway or Cisco Secure Access with a cloud-based isolated browser.