Cisco announces the end-of-sale and end-of life dates for the Cisco ASA 5520 Adaptive Security Appliance. The last day to order the affected product(s) is September 16, 2013. Customers with active service contracts will continue to receive support from the Cisco Technical Assistance Center (TAC) as shown in Table 1 of the EoL bulletin. Table 1 describes the end-of-life milestones, definitions, and dates for the affected product(s). Table 2 lists the product part numbers affected by this announcement. For customers with active and paid service and support contracts, support will be available under the terms and conditions of customers' service contract.
This end-of-sale notice is part of a broader end-of-sale announcement for the Cisco ASA 5500 Series appliances that covers ASA 5510, ASA 5520, ASA 5540, and ASA 5550, including hardware accessories. Please refer to the respective end-of-sale notices for more detail. Software licenses on the Cisco ASA 5520 have not reached their end-of-sale date. The Cisco ASA 9.1 is the last software release that will be supported on ASA 5540 and other ASA 5500 appliances that have reached their end-of-sale date. Customers are encouraged to migrate to the newer ASA 5500-X Series of next-generation firewalls (NGFW), which includes the ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X.
Table 1. End-of-Life Milestones and Dates for the Cisco ASA 5520 Adaptive Security Appliance
End-of-Life Announcement Date
The date the document that announces the end of sale and end of life of a product is distributed to the general public.
March 18, 2013
The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.
September 16, 2013
Last Ship Date:
The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time.
December 15, 2013
End of Routine Failure Analysis Date:
The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect.
September 16, 2014
End of New Service Attachment Date:
For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.
September 16, 2014
End of Service Contract Renewal Date:
The last date to extend or renew a service contract for the product.
December 12, 2017
Last Date of Support:
The last date to receive applicable service and support for the product as entitled by active service contracts or by warranty terms and conditions. After this date, all support services for the product are unavailable, and the product becomes obsolete.
September 30, 2018
HW = Hardware OS SW = Operating System Software App. SW = Application Software
Note that the ASA 5500 appliances (including the ASA 5520) do NOT support NGFW services (AVC and WSE), whereas all ASA 5500-X appliances (including the ASA 5545-X) have been designed ground-up to run multiple services, including the NGFW services, without sacrificing performance.
Table 2. Product Part Numbers Affected by This Announcement
Replacement Product Part Number
Replacement Product Description
ASA 5520 NFR Appl w/ AIP-10, SW, HA, 4GE+1FE, 3DES
ASA 5520 UC Bundle With 1000 UC Proxy Sessions, 3DES/AES
See Product Migration Options section for details.
ASA 5525-X with ASA-UC-1000 license
Product Migration Options
Customers are encouraged to migrate to the newer Cisco ASA 5500-X Series, specifically the Cisco ASA 5525-X. The Cisco ASA 5525-X offers increased throughput, better interface density, and the ability to run services like IPS, AVC (Application Visibility and Control), WSE (Web Security Essentials), etc., without requiring a separate hardware module. Additionally, the ASA 5525-X includes a hardware chip to speed up IPS signature execution (for both default and custom signatures). Refer to the table below for a detailed comparison between the ASA 5520 and ASA 5525-X. Customers can also upgrade to the Cisco ASA 5545-X, which provides the option of dual power supplies in addition to better performance and scaling.
Table 3. Product Comparisons
Cisco ASA 5520 Adaptive Security Appliance
Cisco ASA 5525-X Adaptive Security Appliance
Application Visibility and Control Service
Web Security Service
Yes (Requires separate Hardware module)
Yes (Does not require separate hardware module)
Content Security Card Module
Similar functionality available through Cloud Web Security (formerly known as ScanSafe)
Firewall Throughput (Max)
IPS Throughput (Max)
VPN Throughput (Max)
Connections Per Second
4 GE Copper + 1 FE
8 GE Copper
4-port GE Cu or 4-port GE SFP
6-port GE Copper or 6-port GE SFP
IPS Accelerator hardware
No. All signatures run on IPS Security Module CPU.
In-built hardware accelerator for both default and custom signatures
Hardware support for 2048-bit certificates
Customers may be able to use the Cisco Technology Migration Program (TMP) where applicable to trade-in eligible products and receive credit toward the purchase of new Cisco equipment. For more information about Cisco TMP, customers should work with their Cisco Partner or Cisco account team. Cisco Partners can find additional TMP information on Partner Central at http://www.cisco.com/web/partners/incentives_and_promotions/tmp.html
Customers may be able to continue to purchase the Cisco ASA 5520 Adaptive Security Appliance through the Cisco Certified Refurbished Equipment program. Refurbished units may be available in limited supply for sale in certain countries on a first-come, first-served basis until the Last Date of Support has been reached. For information about the Cisco Certified Refurbished Equipment program, go to: www.cisco.com/go/eos
Service prices for Cisco products are subject to change after the product End of Sale date.
Any authorized translation issued by Cisco Systems or affiliates of this end-of-life Product Bulletin is intended to help customers understand the content described in the English version. This translation is the result of a commercially reasonable effort; however, if there are discrepancies between the English version and the translated document, please refer to the English version, which is considered authoritative.