CIsco ASA 5500?

[besnik baftijari]

My question is : can we still use the 5500 ASA-s even after the EOL and what are the risks, and what we would want to replace e.g 5505 and 5510 with ? anything build in with IPS like the next X generation? 

[Marvin Rhoads]

There are some folks still running Pix firewalls. So yes you can run them for many years if you're happy with the service they provide.

The risks are that you will have the appearance of security without protection against modern day threats such as Malware, ransomware and such things which are often carried in via web browsing and email that your users are allowed to do with the older generation of firewalls.

[Karsten Iwen]

In addition to the important fact (more important then ever) that Marvin mentioned you also put your network at risk because you don't know if there are any vulnerabilities on the device that won't get patched because the device is end of service.

For your replacement question:

Consider the 5506-X, 5508-X or 5516-X instead of the 5505/5510 based on your performance requirements.

[besnik baftijari]

thank you gentleman for taking the time to respond.