Cisco Next-Generation Firewalls der Serie ASA 5500-X

Datenblätter und Produktinformationen

Datenblätter

• Cisco ASA 5500 Series Adaptive Security Appliances Data Sheet 08-Feb-2018
• Cisco ASA 5500 and ASA 5500-X Series Next Generation Firewalls for the Internet Edge Data Sheet 20-Oct-2016
• Cisco ASA 5505 Adaptive Security Appliance for Small Office or Branch Locations Data Sheet 01-Jun-2016
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Module and Card 19-Aug-2014
• Cisco ASA 5500 Series Unified Communications Deployments 23-Dec-2013
• Cisco ASA 5500 Series Content Security and Control Security Services Module 26-Jul-2006

End-of-Life- und End-of-Sale-Hinweise

• End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions 24-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 1 YR Subscriptions 15-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 02-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 02-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 5 YR Subscriptions 05-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5505 Adaptive Security Appliance 01-Apr-2019
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X 01-Apr-2019
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506W-X WiFi Security Appliances 31-Aug-2018
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X Adaptive Security Appliance 01-Dec-2017
• End-of-Sale and End-of-Life Announcement for the Cisco ASA CX Context-Aware Security and Cisco Prime Security Manager 28-Jul-2015
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 1000V 02-Sep-2014

Fragen und Antworten

• Cisco ASA Software Release 8.2 29-Jul-2020

Informationen auf einen Blick

• Cisco ASA Botnet Traffic Filter 23-Dec-2013 (PDF - 696 KB)

Sicherheitshinweise

Bulletins

• Software Lifecycle Support Statement - Next Generation Firewall (NGFW) 21-Oct-2022
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021

Problemhinweise

• Applicable to Multiple Models

  • Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended 03-Aug-2023
  • Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended 06-Mar-2023
  • Field Notice: FN - 72103 - ASA, FXOS and Firepower Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, And Other Functionality - Software Upgrade Recommended 24-Mar-2022
  • Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided 03-Sep-2021
  • Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended 07-Jan-2021
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended 15-Jul-2020
  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended 26-Feb-2020
  • Field Notice: FN - 63705 - ASA 5500-X Appliances - Default IPS Software Might Not Be Installed - Software Upgrade Recommended 19-Mar-2019
  • Field Notice: FN - 63521 - ASA5500-X Appliance - Units shipped without default configuration - Configuration Change Recommended 19-Mar-2019
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended 15-Nov-2018
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64227 - ASA Software - Some Commands Might Fail on ASA 5500-X Security Appliances - Software Upgrade Recommended 11-Oct-2017
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended 10-Oct-2017

• Cisco ASA 5505 Adaptive Security Appliance

  • Field Notice: FN - 63742 - ASA 5505 Series Appliances - Some Appliances Might Fail to Boot Up After a Power Cycle - Replace on Failure 23-Aug-2018
  • Field Notice: FN - 63146 - Third Party VPN Connection May Cause Unintended VPN Interruption for Other Connected Users 12-Aug-2008
• Field Notice: FN - 62378 - ASA Hardware and Software Compatibility Issue Due to a Component Change 17-Apr-2006

Sicherheitsempfehlungen, Antworten und Benachrichtigungen

• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability 01-Nov-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities 01-Nov-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SAML Assertion Hijack Vulnerability 01-Nov-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect SSL/TLS VPN Denial of Service Vulnerability 01-Nov-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability 01-Nov-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Multiple Certificate Authentication Bypass Vulnerability 01-Nov-2023
• cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 12-Oct-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Unauthorized Access Vulnerability 06-Sep-2023
• Cisco FXOS Software Arbitrary File Write Vulnerability 23-Aug-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability 07-Jun-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 09-Nov-2022
• Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability 09-Nov-2022

Release und Kompatibilität

Kompatibilitätsinformationen

• Cisco Secure Firewall Migration Tool Compatibility Guide 09-Nov-2023
• Cisco Secure Firewall ASA Compatibility 03-Oct-2023
• Supported VPN Platforms, Cisco Secure Firewall ASA Series 08-Sep-2023
• Cisco Firepower Classic Device Compatibility Guide 06-May-2022

Versionshinweise

• Cisco Secure Firewall Management Center New Features by Release 15-Nov-2023
• Cisco Secure Firewall Device Manager New Features by Release 14-Nov-2023
• Cisco Secure Firewall ASA New Features by Release 03-Oct-2023
• Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes 29-Sep-2023
• Release Notes for the Cisco ASA Series, 9.14(x) 15-Nov-2022
• Cisco Firepower Release Notes, Version 6.2.3 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.3.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.5.0 Patches 29-May-2022
• Firepower 마이그레이션 툴 릴리즈 노트 29-Apr-2021 (PDF - 265 KB)
• Firepower 마이그레이션 툴 릴리즈 노트 23-Mar-2021 (PDF - 265 KB)
• Release Notes for the Cisco ASA Device Package Software, Version 1.3(12) for ACI 02-Oct-2020
• Release Notes for the Cisco ASA Device Package Software, Version 1.2(12) for ACI 02-Oct-2020
• Cisco Firepower Release Notes, Version 6.2.3 16-Sep-2020
• Release Notes for the Cisco ASA Series, 9.9(x) 25-Aug-2020
• Release Notes for Cisco ASDM, 7.13(x) 02-Apr-2020

Referenz

Befehlsreferenzen

• Cisco Secure Firewall Threat Defense Command Reference 20-Nov-2023
• Cisco Secure Firewall ASA Series Command Reference, A-H Commands 26-Oct-2023
• Cisco Secure Firewall ASA Series Command Reference, I - R Commands 07-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, S Commands 07-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM 07-Sep-2023

Dokumentations-Roadmaps

• Navigating the Cisco Secure Firewall Threat Defense Documentation 13-Sep-2023
• Navigating the Cisco Secure Firewall ASA Series Documentation 07-Sep-2023
• Navigating the Cisco Secure Firewall Migration Tool Documentation 01-Feb-2023
• Welcome to the Cisco ASA 5500-X Series 15-Jan-2016
• Welcome to the Cisco ASA 5505 10-Nov-2015
• Welcome to the Cisco ASA 5585-X 08-Oct-2013

Lizenzinformationen

• Frequently Asked Questions (FAQ) about Licensing 08-Sep-2023
• Cisco Secure Firewall ASA Series Feature Licenses 07-Sep-2023
• Cisco Secure Firewall Management Center Feature Licenses 07-Sep-2023
• Open Source Used In Cisco Firepower Version 6.3 03-Dec-2018 (PDF - 19 MB)
• Open Source Used In Cisco Firepower Version 6.2.3 29-Mar-2018 (PDF - 17 MB)
• Open Source Used In Cisco Firepower Version 6.2.2 21-Aug-2017 (PDF - 15 MB)
• Open Source Used In FireSIGHT System Version 5.4.1.x 27-Jan-2017 (PDF - 7 MB)
• Open Source Used In Firepower System Version 6.1 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.2 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Context Directory Agent 1.0 11-Jun-2012 (PDF - 1 MB)
• Open Source Licensing Information 20-Jun-2011 (PDF - 252 KB)

Design

Designleitfäden

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers 20-Mar-2020

Installation und Upgrade

Installations- und Upgrade-Leitfäden

• Migrating Cisco Secure Firewall ASA to Cisco Secure Firewall Threat Defense with the Migration Tool 10-Nov-2023
• Migrating Firewalls with the Firewall Migration Tool in Cisco Defense Orchestrator 08-Nov-2023
• Migrating Fortinet Firewall to Secure Firewall Threat Defense with the Migration Tool 16-Oct-2023
• Migrating Palo Alto Networks Firewall to Secure Firewall Threat Defense with the Migration Tool 16-Oct-2023
• Migrating Check Point Firewall to Secure Firewall Threat Defense with the Migration Tool 10-Oct-2023
• Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide 02-Oct-2023
• Migrating ASA with FirePOWER Services (FPS) Firewall to Secure Firewall Threat Defense with the Migration Tool 14-Sep-2023
• Cisco Secure Firewall ASA Upgrade Guide 07-Sep-2023
• Cisco Secure Firewall ASA to Threat Defense Feature Mapping 28-Feb-2023
• Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance 29-May-2022
• Secure Firewall Management Center and Threat Defense Management Network Administration 16-Feb-2022
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.1_7 Quick Start Guide 12-Dec-2021 (PDF - 2 MB)
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.2 Quick Start Guide 02-Dec-2021 (PDF - 2 MB)
• Cisco ASA REST API Quick Start Guide 16-Jun-2021
• Migrating an ASA to an FDM-Managed Device Using Cisco Defense Orchestrator 06-May-2021

Technische Hinweise zu Installation und Upgrade

• Cisco ASA 5505 Adaptive Security Appliance

  • ASA 9.x-Upgrade des Software-Images mithilfe von ASDM oder CLI konfigurieren 19-Oct-2023

Konfiguration

Konfigurationsbeispiele und technische Hinweise

• Konfigurieren des Datenverkehrs zum Zurückdrehen des AnyConnect VPN-Clients auf ASA 9.X 11-Sep-2023
• Konfigurieren des AnyConnect-Clientzugriffs auf das lokale LAN 21-Aug-2023
• Konfigurieren der ASA für redundante oder Backup-ISP-Verbindungen 08-Aug-2023
• Konfigurieren von ASA: Installation und Verlängerung von digitalen SSL-Zertifikaten 03-Aug-2023
• Benutzerhandbuch für sichere ASA-Firewall 02-Aug-2023
• Konfigurieren der Protokollierung auf FTD über FMC 10-Jul-2023
• Konfigurationsbeispiel für LDAP-Attributzuordnungen verwenden 15-Mar-2023
• Konfigurieren des ASA Border Gateway Protocol 19-Jan-2023
• Konfigurieren der Network Address Translation und der ACLs auf einer ASA-Firewall 14-Nov-2022
• Adaptive Security Appliance (ASA)-Syslog konfigurieren 04-Nov-2022
• Konfigurieren eines standortübergreifenden VPN-Tunnels mit ASA und Strongswan 06-Oct-2022
• Configure VPN Filters on Cisco ASA 21-Jul-2022
• Konfigurieren von FTD aus der ASA-Konfigurationsdatei mit dem FirePOWER Migration Tool 08-Feb-2022
• ASA: Smart Tunnel mit ASDM-Konfigurationsbeispiel 22-Apr-2021
• Konfigurationsbeispiel für ASA mit CX/FirePower-Modul und CWS Connector 18-Nov-2020

Konfigurationsleitfäden

• Firepower Management Center Configuration Guide, Version 6.0.1 21-Aug-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6 18-May-2023
• Firepower Management Center Configuration Guide, Version 6.0 04-Apr-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0 20-Oct-2022
• Firepower Management Center Configuration Guide, Version 6.4 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.5 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.2.3 02-Aug-2022
• Cisco Secure Firewall ASA HTTP Interface for Automation 21-Jun-2022
• Firepower Management Center Configuration Guide, Version 6.6 25-May-2022
• Cisco Firepower Threat Defense Hardening Guide, Version 7.0 30-Apr-2022
• Cisco Secure Firewall Threat Defense Hardening Guide, Version 7.2 30-Apr-2022
• About the ASA REST API 13-Jul-2021
• Cisco Secure Firewall ASA Legacy Feature Guide 16-Jun-2021
• Cisco Secure Firewall ASA Botnet Traffic Filter Guide 16-Jun-2021
• Cisco Secure Firewall ASA Unified Communications Guide 16-Jun-2021

Programmierungsleitfäden

• Cisco Secure Firewall Threat Defense REST API Guide 30-Apr-2019

Betrieb und Wartung

Technische Hinweise zu Wartung und Betrieb

• Optimierung des AnyConnect Split-Tunnels für Microsoft Office 365/WebEx 13-Jun-2023
• EEM-Beispiele für unterschiedliche VPN-Szenarien auf ASA 08-Sep-2014

Fehlerbehebung

Fehler- und Systemmeldungen

• Syslog and Error Messages

  • Cisco ASA Series Syslog Messages 07-Sep-2023
  • Cisco Firepower Threat Defense Syslog Messages 07-Sep-2023
  • Cisco Firepower Migration Tool Error Messages 29-Oct-2020

Support FAQ

• Was bedeutet die IPS-Meldung "IPS SSP-Anwendung neu laden von IPS"? 30-May-2016
• ASA Häufig gestellte Fragen: Wie interpretieren Sie die von der ASA generierten Syslogs, wenn sie Verbindungen aufbaut oder löscht? 19-Aug-2015
• ASA Häufig gestellte Fragen: Was geschieht nach dem Failover, wenn dynamische Routen synchronisiert werden? 10-Aug-2015
• ASA - Wann und warum sollte der Befehl write standby verwendet werden? 25-Mar-2013
• Warum verfügt die ASA über erweiterte Einträge mit Leerwertwerten länger als die konfigurierten Zeitüberschreitungen? 12-Mar-2013
• ASA Adaptive Security Appliance der Serie 5500 - Häufig gestellte Fragen 02-Mar-2012

Technische Hinweise zur Fehlerbehebung

• Konfigurieren eines standortübergreifenden IKEv2-Tunnels zwischen ASA und Router 29-Aug-2023
• Überwachung und Fehlerbehebung bei ASA-Leistungsproblemen 24-Mar-2023
• Verwendung von ASA IKEv2-Debugs für Site-to-Site-VPN mit PSKs 10-Feb-2023
• ASA TCP-Verbindungs-Flags für Auf- und Abbau 11-Jan-2023
• Beheben von Störungen des Datenverkehrsflusses durch AnyConnect-Verbindungen 20-Dec-2022
• Verständnis der Synchronisierung der ASA-MAC-Tabelle mit hoher Verfügbarkeit im transparenten Modus mit HSRP-Routern 18-Aug-2022
• Konfigurieren von ASA-Port Forwarding Version 9 mit NAT 05-Aug-2022
• Fehler bei kryptografischen AnyConnect-Algorithmen mit aktivierter FIPS-Funktion beheben 20-Jul-2022
• Fehlerbehebungsleitfaden für AnyConnect VPN-Client – häufige Probleme 23-Jul-2021
• Blockierter CWS auf ASA-Datenverkehr zu internen Servern 29-Oct-2020
• Auswahlprozess für ASA VPN Load Balancing Director 12-Oct-2020
• Konfigurationsbeispiel für Cut-Through- und Direct-ASA-Authentifizierung 20-Aug-2020
• ASA 8.3-Problem: MSS übertroffen - HTTP-Clients können nicht zu einigen Websites wechseln 26-Nov-2019
• MPTCP- und Produkt-Support - Übersicht 20-Jun-2019
• Fehlerbehebung bei AnyConnect VPN-Telefonen - IP-Telefone, ASA und CUCM 16-Apr-2018

Literatur

Anwenderberichte

• Oxford University Hospital Customer Case Study 15-Apr-2015 (PDF - 425 KB)
• Wireless quality gives Messe Frankfurt powerful tools with multiple benefits for events 09-Dec-2013 (PDF - 182 KB)
• Frankfurt Airport transforms workplace efficiency with WiFi next generation 30-Oct-2013 (PDF - 253 KB)