Guest

Cisco PIX 500 Series Security Appliances

EoS/EoL for the Cisco PIX Security Appliance Software V.5.2

Table Of Contents

Product Bulletin No. 2405

Product Migration Options

Additional Information

Product Bulletin No. 2405


End-of-Sale and End-of-Life Announcement for the
Cisco PIX Security Appliance Software Version 5.2
and Associated License Options and Upgrades

Cisco Systems® announces the end of life of the Cisco® PIX® Security Appliance Software version 5.2 and associated license key options and upgrades. The last day to order the Cisco PIX Security Appliance Software version 5.2 and associated license key options and upgrades is August 12, 2004. Customers will continue to receive support from the Cisco Technical Assistance Center (TAC) until August 12, 2009. Table 1 describes the end-of-life milestones, definitions, and dates and Table 2 lists part numbers related to this announcement.

Since the introduction of Cisco PIX Security Appliance Software version 5.2, Cisco has delivered several software releases that introduced a variety of market-leading security features, enhanced remote management, improved network integration, expanded resiliency capabilities, and more. Highlights of enhancements introduced in these new Cisco PIX Security Appliance software releases include:

Rich security services for a broad range of multimedia and voice over IP (VoIP) standards, including Session Initiation Protocol (SIP), Skinny Client Control Protocol (SCCP), H.323 versions 3 and 4, and Media Gateway Control Protocol (MGCP)

Significantly expanded site-to-site and remote access VPN capabilities, including support for the new higher-performance Cisco PIX VPN Accelerator Card+, support for Cisco Easy VPN, and support for Advanced Encryption Standard (AES)

Enhanced remote management capabilities, including improved access control list (ACL) and syslog management, object grouping, as well as automated software and configuration updating using CiscoWorks Auto Update

Improved network integration using support for IEEE 802.1q-based VLANs, Open Shortest Path First (OSPF) Protocol dynamic routing, and multicast network traffic

Enhanced resiliency through introduction of LAN-based stateful failover

Given the wide range of benefits provided by the recent software releases, customers are encouraged to migrate from Cisco PIX Security Appliance Software version 5.2 to Cisco PIX Security Appliance Software version 6.3. For information about features in Cisco PIX Security Appliance Software version 6.3, go to the URL mentioned in the Additional Information section of this notice.

Customers that require Common Criteria EAL4 evaluated software and are currently using Cisco PIX Security Appliance Software version 5.2(3) are encouraged to migrate to Cisco PIX Security Appliance Software version 6.2(2), which has also earned Common Criteria EAL4 evaluation status.

Table 3 provides relevant information for migrating from Cisco PIX Security Appliance Software version 5.2 to the recommended software release based on customer requirements for a software release type.

The current Cisco PIX Security Appliance licensing is a "feature-based" license key system. This type of license key structure manages which features will be enabled or disabled. Legacy Cisco PIX Security Appliances including Cisco PIX Classic, 10K, 510, and 520 Security Appliance models supported a "connection-based" license key system that managed the maximum number of connections allowed by the platform. The product part numbers for the legacy licensing system listed in Table 2 are affected by this end-of-sale announcement. For more information about the current Cisco PIX Security Appliance license key system, go to the URL mentioned in the Additional Information section of this notice.

Table 1  End-of-Life Milestones and Dates for the Cisco PIX Security Appliance Software version 5.2

Milestone
Definition
Date
End-of-life announcement date

The date the document that announces the end of sale and end of life of a product is distributed to the general public.

February 12, 2004

End-of-sale date

The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.

August 12, 2004

Last shipment date

The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead-time.

November 12, 2004

End of software maintenance releases date

The last date that Cisco Engineering may release any final software maintenance releases or bug fixes. After this date, Cisco Engineering will no longer develop, repair, maintain, or test the product software.

August 12, 2005

End of new service attachment date

For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.

August 12, 2005

End of service contract renewal date

The last date to extend or renew a service contract for the product. The extension or renewal period cannot extend beyond the last date of support.

May 12, 2009

Last date of support

The last date to receive service and support for the product. After this date, all support services for the product are unavailable, and the product becomes obsolete.

August 12, 2009


Table 2  Product Part Numbers Affected by This Announcement

End-of-Sale Product Part Number
Product Description
SF-PIX-5.2

Cisco PIX version 5.2 Software for the Cisco PIX 515/515E, 520, 525, and 535 firewall chassis

SF-PIX-5.2.3-EAL4

Cisco PIX version 5.2(3) Software, EAL4 evaluated, for Cisco PIX Chassis

PIX-CONN-128-1K=

Cisco PIX Classic, 10K, 510, 520 Entry-to-Midrange license upgrade

PIX-CONN-128-UR=

Cisco PIX Classic, 10K, 510, 520 Entry-to-UR license upgrade

PIX-CONN-1K-UR=

Cisco PIX Classic, 10K, 510, 520 Midrange-to-UR license upgrade

PIX-CONN-FO-128=

Cisco PIX Classic, 10K, 510, 520 Failover-to-Entry license upgrade

PIX-CONN-FO-1K=

Cisco PIX Classic, 10K, 510, 520 Failover-to-Midrange license upgrade

PIX-CONN-FO-UR=

Cisco PIX Classic, 10K, 510, 520 Failover-to-UR license upgrade

PIX-CONN-128

Cisco PIX entry-level license (recommended for up to 100 users; allows 128 connections)

PIX-CONN-1K

Cisco PIX mid-range license (recommended for between 100 and 500 users; allows
1024 connections)

PIX-CONN-UR

Cisco PIX unrestricted license (recommended for 500 or more users; allows from 32,768 to 65,536 connections)


Product Migration Options

The recommended replacement for Cisco PIX Security Appliance Software version 5.2(3) is Cisco PIX Security Appliance Software version 6.3 or later.

Customers requiring a Common Criteria EAL4 evaluated software and who are currently using Cisco PIX Security Appliance Software version 5.2(3) are encouraged to migrate to Cisco PIX Security Appliance Software version 6.2(2), which has received EAL4 evaluation.

Customers requiring a General Deployment (GD) release are encouraged to migrate to Cisco PIX Security Appliance Software version 6.2(3) GD release.

Customers with a Cisco SMARTnet® contract can download the appropriate migration to Cisco PIX Security Appliance Software by going to:

http://www.cisco.com/public/sw-center/ciscosecure/pix.shtml

Table 3  Product Migration Recommendations for Cisco PIX Security Appliance Software version 5.2

End-of-Sale Product
 
Replacement Product
Part Number
Description
Customer's Requirement for Release Type
Part Number
Description

SF-PIX-5.2

Cisco PIX v5.2 Software for the 506/506E, 515/515E, 520, 525, and 535 Chassis

No special requirements

SF-PIX-506-6.3

Cisco PIX v6.3 Software for the Cisco PIX 506/506E Chassis

SF-PIX-6.3

Cisco PIX v6.3 Software for the Cisco PIX 515, 515E, 520, 525, and 535 Chassis

GD (General Deployment)

SF-PIX-506-6.2

Cisco PIX v6.2(3) Software Release or later for the Cisco PIX 506/506E Chassis

SF-PIX-6.2

Cisco PIX v6.2(3) Software Release or later for the Cisco PIX 515, 515E, 520, 525, and 535 Chassis

SF-PIX-5.2.3-EAL4

Cisco PIX v5.2(3) Software, EAL4 evaluated, for the Cisco PIX Chassis

Common Criteria EAL4 Evaluated

SF-PIX506-6.2-EAL4

Cisco PIX v6.2(2) Software, EAL4 evaluated, for the Cisco PIX 506/506E Chassis

SF-PIX-6.2-EAL4

Cisco PIX v6.2(2) Software, EAL4 evaluated, for the Cisco PIX 515, 515E, 520, 525, and 535 Chassis


Additional Information

For more information about Cisco PIX Security Appliance Software version 5.2, go to:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b32.html

For more information about Cisco PIX Security Appliance Software version 6.2, go to:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080124551.html

For more information about Cisco PIX Security Appliance Software version 6.3, go to:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080148714.html

For more information about Cisco PIX Security Appliance licensing, go to:

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_data_sheet09186a00800b0d85.html

For more information about Cisco products, please contact your Cisco account manager and/or Cisco Channel Partner.

For more information about the Cisco End-of-Life Policy, go to:

http://www.cisco.com/en/US/products/prod_end_of_life.html

To subscribe to receive End-of-Life/End-of-Sale information, go to:

http://www.cisco.com/pcgi-bin/Support/FieldNoticeTool/field-notice