Cisco ASA5500-X Series Next-Generation Firewall

[longchen]

Hi ,

Here I have a confusion about the Cisco ASA5500-X Series Next-Generation Firewall. How can I distinguish if I use a normal ASA5500-X or an ASA5500-x next-generation ? Any show command can help?

Also I found ASA 5585-X can be for both ASA NG Firewall Service(ASA CX) and normal ASA 5500-X series Firewalls, can I use the image name in show version to make a difference?

Thanks!

[Marvin Rhoads]

The term "next generation firewall" is inexact and has been used by Cisco for several instantiations of their ASA product line.

"show module" will tell you whether you have the legacy IPS, CX (also discontinued) or SFR (FirePOWER) current module type. Any one of the three can exist at a given time in an ASA 5500-X series appliance (as long as it has the ASA image like 99% do). On all but the 5585-X it's a software module and one can change it out via software reconfiguration. The 5585-X has a hardware module and that cannot be re-imaged (and the FirePOWER module is being discontinued for it).