When will ASA ios be obelete?

[UT_games]

As the title says when will Cisco go exclusively to the new FirePower Appliances running FTD and stop pushing updates for the ASA ios?

[Sheraz.Salim · Accepted solution]

There is no plan from cisco to sunset the ASA. it will be supported yes FTD is the new appliance but still it give you the choise according to your needs either you run the asa code software or the FTD code.

here Andrew ossipov "Sheraz, there is no plan or even a notion to sunset the ASA application. It serves a different use case of basic stateful firewalling and VPN termination than FTD, so both products will exist for the foreseeable future."

[UT_games]

Appreciate that feedback, while I have you I had an additional question.

Would it be security best practices to implement FTD rather ASA to take advantage of NGIPS? Are there any other features that are gained when running FTD over ASA ios? Other than the NGIPS

We're looking at doing an upgrade, so we're looking at leaving ASA ios which we're comfortable with and going with FTD

[Sheraz.Salim]

Would it be security best practices to implement FTD rather ASA to take advantage of NGIPS? Are there any other features that are gained when running FTD over ASA ios? Other than the NGIPS

-FTD is a unified software combination of Firepower Snort and ASA code. therefore, running/using FTD you will have layer7 inspection (deep packet inspection).

We're looking at doing an upgrade, so we're looking at leaving ASA ios which we're comfortable with and going with FTD

- if you want to upgrade to FTD physical appliance. you can run this phyiscal appliances as ASA code (but not layer7 inspection) or with FTD code where you have all the layer7 features.

[UT_games]

Great thanks!