Guest

Cisco ASA Next-Generation Firewall Services

Cisco CX and Cisco Prime Security Manager Compatibility

  • Viewing Options

  • PDF (263.7 KB)
  • EPUB (60.5 KB)
  • MOBI (78.3 KB)
  • Feedback

Table of Contents

Cisco CX and Cisco Prime Security Manager Compatibility

ASA, ASA CX Compatibility

Cisco Prime Security Manager ASA CX Device Support Matrix

Cisco ASA CX Hardware Compatibility

Cisco Prime Security Manager ASA without CX Device Support

System Software Upgrade Paths

Cisco CX and Cisco Prime Security Manager Compatibility

Published: November 30, 2012

Last Updated: June 30, 2014

This document lists the compatibility for software and hardware for Cisco CX platforms and Cisco Prime Security Manager (PRSM).

Compatibility information covers the following:


Note For compatibility information regarding related software, such as Active Directory, see the release notes for your software version at http://www.cisco.com/c/en/us/support/security/asa-next-generation-firewall-services/products-release-notes-list.html.


For a list of available documentation, see Finding ASA CX and Cisco Prime Security Manager Documentation at http://www.cisco.com/c/en/us/td/docs/security/asacx/roadmap/asacxprsmroadmap.html.

ASA, ASA CX Compatibility

The following topics cover compatibility for ASA and ASA CX devices.

Cisco Prime Security Manager ASA CX Device Support Matrix

Cisco Prime Security Manager (PRSM) Multiple Device mode can manage ASA CX devices and the ASAs that contain them. The following table shows the supported software versions for managed ASA CX devices based on the PRSM version.

The table is based on the ASA CX software version running on the device; if a cell includes an ASA version, that combination is supported when the ASA is running the indicated software version. The table assumes that you are running the most recently released build for a given ASA CX version.

 

Table 1 Cisco Prime Security Manager ASA CX Device Support

ASA CX Version
PRSM Version
9.0(1)
9.0(2)
9.1(1)
9.1(2)
9.1(3)
9.2(1)
9.3(1)

9.0(1)

ASA 8.4(4.1)

9.0(2)

ASA 8.4(4.1)

9.1(1)

ASA 9.1(1)

9.1(2)

ASA 9.1(2)

9.1(3)

ASA 9.1(3)

9.2(1)

ASA 9.1(5)

9.3(1)

ASA 9.1(5)

Cisco ASA CX Hardware Compatibility

Cisco ASA CX Software can run on select hardware platforms. Some platforms are dedicated to the ASA CX, others allow you to install ASA CX as a software module.

The following table shows the hardware platforms that support each ASA CX hardware or software module, and the required ASA CX and ASA Software versions. The table assumes that you are running the most recently released build for a given ASA CX version.

 

Table 2 Cisco ASA CX Hardware Compatibility

ASA Model
ASA CX Hardware
ASA CX Version
ASA Version

ASA 5585-X

(-10 and -20)

Cisco ASA 5585-X CX Security Services Processor

Models CX SSP-10 or CX SSP-20 in slot 1, with matching-level ASA SSP in slot 0.

9.0(1, 2)

ASA 8.4(4.1)

9.1(1)

ASA 9.1(1)

9.1(2)

ASA 9.1(2)

9.1(3)

ASA 9.1(3)

9.2(1)

ASA 9.1(5)

9.3(1)

ASA 9.1(5)

ASA 5585-X

(-40 and -60)

Cisco ASA 5585-X CX Security Services Processor

Models CX SSP-40 or CX SSP-60 in slot 1, with matching-level ASA SSP in slot 0.

9.2(1)

ASA 9.1(5)

9.3(1)

ASA 9.1(5)

ASA 5512-X, 5515-X, 5525-X, 5545-X, 5555-X

Cisco ASA 5500-X CX Security Services Processor

9.1(1)

ASA 9.1(1)

9.1(2)

ASA 9.1(2)

9.1(3)

ASA 9.1(3)

9.2(1)

ASA 9.1(5)

9.3(1)

ASA 9.1(5)

Cisco Prime Security Manager ASA without CX Device Support

In addition to the ASA CX support matrix shown in Cisco Prime Security Manager ASA CX Device Support Matrix, PRSM 9.2 and higher can manage Cisco ASA-5500 Series Adaptive Security Appliance (ASA) devices that do not include a CX module. The following table shows the supported models and ASA Software versions for non-CX ASA devices.

 

Table 3 Cisco Prime Security Manager ASA without CX Device Support

ASA Model
Supported ASA Software Versions (No CX Installed)
By PRSM Version
9.2(1)
9.3(1)

5510

5512-X

5515-X

5520

5525-X

5540

5545-X

5550

5555-X

5585-X, all models

  • 9.0(1), 9.0(2)
  • 9.1(x)
  • 9.0(1), 9.0(2)
  • 9.1(x)
  • 9.2(x)
  • 9.3(x)

System Software Upgrade Paths

The following table shows the supported upgrade paths for System Software packages. Supported paths have been tested; any other combination is untested and is not supported. Thus, you might need to apply multiple upgrade packages to get to the current release.


Note Tested upgrade paths are for the most recent build number for a given version, and sometimes the second most recent build. For example, upgrade from 9.1(1) to 9.1(3) is tested with build 9.1(1) Build 21; 9.1(2) to 9.1(3) is tested with 9.1(2) Builds 29 and 42. To ensure the best results, you should upgrade to the most recent build for the release you are running before upgrading to a new version.


 

Table 4 Cisco CX and Cisco Prime Security Manager Upgrade Paths

Old Version
New Version
9.0(1)
9.0(2)
9.1(1)
9.1(2)
9.1(3)
9.2(1)
9.3(1)

9.0(1)

Yes

Yes

9.0(2)

Yes

Yes

9.1(1)

Yes

Yes

Yes

Yes

Yes

9.1(2)

Yes

Yes

Yes

Yes

9.1(3)

Yes

Yes

Yes

9.2(1)

Yes

Yes

9.3(1)

Yes