ASA firewall

[Abdul salaam]

Hello Guys

What is the last product of ASA firewall ? When the ASA is going to be end of life forever. 

Cheers

[MHM Cisco World]

Asa 5506 eol is 2026 

So go for fpr 1000 or 2000 is better 

[Gopinath_Pigili]

I grew up with Cisco ASA (and PIX) :). One of the legends about it was that once you deploy ASA you could just forget the firewall issues. That was a legend of ASA stability. Good old ASAs then transformed into Next-Generation firewalls. ASA 5500-X with the SFR modules became popular after the acquisition of Source Fire by Cisco Systems. After a few years of the ASA X series popularity, Firepower appliances appeared on the horizon.

What next? Cisco used to propose migration options for the EoL hardware lines. For the popular models, Cisco suggests:

• 5506, 5508, 5512, 5515, 5516 -> Cisco Firepower 1000 models
• 5525, 5545, 5555 -> Cisco Firepower 2100 models
• 5585-X -> Cisco Firepower 4100 models

I hope the above information is useful....

Thanks

[M.Sultan]

Thank you very much... 

means cisco replaces ASA by the Cisco firewall power ?

• 5506, 5508, 5512, 5515, 5516 -> Cisco Firepower 1000 models
• 5525, 5545, 5555 -> Cisco Firepower 2100 models
• 5585-X -> Cisco Firepower 4100 models

[Karsten Iwen]

The typical confusion is caused by the fact that ASA and Firepower are both a hardware platform and software. The ASA hardware is going away, but on the firepower hardware you can run both the ASA or the Firepower software depending on your needs.

[M.Sultan]

In this case only the hardware product is going away from the market and still we can run the ASA ios into Firepower product ? 

[Gopinath_Pigili]

Yes....

Cisco Firepower models are Next Generation Firewalls....more powerfull and supports more advanced features...than Cisco ASA.

Thanks

[Marvin Rhoads]

ASA software is continuing development with no plans to make it End of Life. All ASA hardware appliances are past end of sales and many are end of support / end of life.

You can run ASA software on any Cisco Secure firewall hardware appliance (1000 through 9000 series) as well as ASAv (virtual) appliance form factor both on-premises on your own hypervisor or in public cloud. In all those cases you won't get any Next Generation Firewall (NGFW) features (Security Intelligence, IPS, Identity integration, URL category filtering, Malware protection etc.). However, the classic ASA features are all there. One exception is clientless SSL VPN which is discontinued on all current ASA versions. Customers with that requirement should consider Duo Access Gateway or Cisco Secure Access with a cloud-based isolated browser.