Cisco recommends customers upgrade to the Cisco Firepower 1000 Series appliances because they are easy to configure and manage, have enhanced threat defense and intelligence, power up devices quietly and easily, and protect investment with an integrated platform.
End-of-life milestones, affected product part numbers, and more details about product migration are found in this notice.
Table 1. End-of-life milestones and dates for the Cisco Secure Firewall ASA 5508-X and ASA 5516-X
| Milestone | Definition | Date |
|---|---|---|
| End-of-Life Announcement Date | The date the document that announces the end of sale and end of life of a product is distributed to the general public. | February 1, 2021 |
| End-of-Sale Date: HW, License | The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date. | August 2, 2021 |
| Last Ship Date: HW, License | The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time. | October 31, 2021 |
| End of Routine Failure Analysis Date: HW | The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect. | August 2, 2022 |
| End of New Service Attachment Date: HW | For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract. | August 2, 2022 |
| End of Signature Release Date: APP SW | The date after which there will be no more signature update release for Cisco ASA5508 and ASA5516 Series security appliance and 5 year subscription products going end of life | August 31, 2026 |
| End of Service Contract Renewal Date: HW | The last date to extend or renew a service contract for the product. | October 28, 2025 |
| Last Date of Support: HW | The last date to receive applicable service and support for the product as entitled by active service contracts or by warranty terms and conditions. After this date, all support services for the product are unavailable, and the product becomes obsolete. | August 31, 2026 |
| Data Retention | The last date to retrieve data from SaaS or cloud products. After this date, all data will be purged and cannot be recovered. | November 31, 2026 |
Cisco Firepower
Desktop model with integrated switch tailored to small businesses.
Cisco Firepower
Rack-mount model supports small businesses with additional throughput.
Cisco Firepower
Protect your midsize businesses from attackers and block malware.
Cisco Firepower
Increase productivity of your branch offices with high performance firewall.
Table 2. Product part numbers affected by this announcement
| End-of-Sale Product Part Number | Product Description | Replacement Product Part Number |
|---|---|---|
| ASA5508 | ASA 5508-X with FirePOWER services, 8GE, AC, DES | See above for detailed guidance about replacement. |
| ASA5508-BRACKET= | ASA 5508-X Bracket Spare | See above for detailed guidance about replacement. |
| ASA5508-CTRL-LIC | Cisco ASA5508 Control License | See above for detailed guidance about replacement. |
| ASA5508-CTRL-LIC= | Cisco ASA5508 Control License | See above for detailed guidance about replacement. |
| ASA5508-FIPS-KIT= | ASA 5508-X FIPS KIt | See above for detailed guidance about replacement. |
| ASA5508-FTD-K9 | ASA 5508-X with Firepower Threat Defense, 8GE, AC | See above for detailed guidance about replacement. |
| ASA5508-K8 | ASA 5508-X with FirePOWER services, 8GE, AC, DES | See above for detailed guidance about replacement. |
| ASA5508-K9 | ASA 5508-X with FirePOWER services, 8GE, AC, 3DES/AES | See above for detailed guidance about replacement. |
| ASA5508-SEC-PL | ASA 5508-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + Conns | See above for detailed guidance about replacement. |
| ASA5508-SSD | ASA 5508-X SSD | See above for detailed guidance about replacement. |
| ASA5508-SSD++= | ASA 5508-X SSD | See above for detailed guidance about replacement. |
| ASA5508-SSD= | ASA 5508-X SSD | See above for detailed guidance about replacement. |
| ASA5516 | ASA 5516-X with FirePOWER services, 8GE, AC, DES | See above for detailed guidance about replacement. |
| ASA5516-BRACKET= | ASA 5516-X Bracket Spare | See above for detailed guidance about replacement. |
| ASA5516-CTRL-LIC | Cisco ASA5516 Control License | See above for detailed guidance about replacement. |
| ASA5516-CTRL-LIC= | Cisco ASA5516 Control License | See above for detailed guidance about replacement. |
| ASA5516-FIPS-KIT= | ASA 5516-X FIPS KIt | See above for detailed guidance about replacement. |
| ASA5516-FIPS-KIT | ASA 5516-X FIPS KIT | There is currently no replacement product available for this product. |
| ASA5516-FPWR-K8 | ASA 5516-X with FirePOWER services, 8GE, AC, DES | See above for detailed guidance about replacement. |
| ASA5516-FPWR-K9 | ASA 5516-X with FirePOWER services, 8GE, AC, 3DES/AES | See above for detailed guidance about replacement. |
| ASA5516-FTD-K9 | ASA 5516-X with Firepower Threat Defense, 8GE, AC | See above for detailed guidance about replacement. |
| ASA5516-SSD | ASA 5516-X SSD | See above for detailed guidance about replacement. |
| ASA5516-SSD++= | ASA 5516-X SSD | See above for detailed guidance about replacement. |
| ASA5516-SSD= | ASA 5516-X SSD | See above for detailed guidance about replacement. |
| ASA5516T-BASE | Cisco ASA5516 Threat Defense Base License | See above for detailed guidance about replacement. |
| ASA5500-SC-5 | ASA 5500 5 Security Contexts License | See above for detailed guidance about replacement. |
| ASA5500-SC-5= | ASA 5500 5 Security Contexts License | There is currently no replacement product available for this product. |
| ASA5500-ENCR-K7 | ASA 5500 Strong Encryption License (3DES/AES) for NPE HW | See above for detailed guidance about replacement. |
| ASA5500-ENCR-K8 | ASA 5500 Base Encryption Level (DES) | See above for detailed guidance about replacement. |
| ASA5500-ENCR-K9 | ASA 5500 Strong Encryption License (3DES/AES) | See above for detailed guidance about replacement. |
| L-ASA5508-AMP-5Y | Cisco ASA5508 FirePOWER AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-P-5Y | Cisco Defense Orchestrator for ASA5508 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-TA-5Y | Cisco ASA5508 FirePOWER IPS 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-TAC-5Y | Cisco ASA5508 FirePOWER IPS and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-TAM-5Y | Cisco ASA5508 FirePOWER IPS and AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-TAMC-5Y | Cisco ASA5508 FirePOWER IPS, AMP and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508-URL-5Y | Cisco ASA5508 FirePOWER URL Filtering 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-AMP-5Y | Cisco ASA5508 Threat Defense Malware Protection 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-T-5Y | Cisco ASA5508 Threat Defense Threat Protection 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-TC-5Y | Cisco ASA5508 Threat Defense Threat and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-TM-5Y | Cisco ASA5508 Threat Defense Threat and Malware 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-TMC-5Y | Cisco ASA5508 Threat Defense Threat, Malware and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5508T-URL-5Y | Cisco ASA5508 Threat Defense URL Filtering 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-AMP-5Y | Cisco ASA5516 FirePOWER AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-P-5Y | Cisco Defense Orchestrator for ASA5516 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-TA-5Y | Cisco ASA5516 FirePOWER IPS 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-TAC-5Y | Cisco ASA5516 FirePOWER IPS and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-TAM-5Y | Cisco ASA5516 FirePOWER IPS and AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-TAMC-5Y | Cisco ASA5516 FirePOWER IPS, AMP and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516-URL-5Y | Cisco ASA5516 FirePOWER URL Filtering 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-AMP-5Y | Cisco ASA5516 Threat Defense Malware Protection 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-T-5Y | Cisco ASA5516 Threat Defense Threat Protection 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-TC-5Y | Cisco ASA5516 Threat Defense Threat and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-TM-5Y | Cisco ASA5516 Threat Defense Threat and Malware 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-TMC-5Y | Cisco ASA5516 Threat Defense Threat, Malware and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-ASA5516T-URL-5Y | Cisco ASA5516 Threat Defense URL Filtering 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-P-5Y | SVP Cisco Defense Orchestrator for ASA5508 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-PN-5Y | SVP Cisco Defense Orchestrator for ASA5508 with FPWR 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-TA-5Y | SVP Cisco ASA5508 FirePOWER IPS 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-TAC-5Y | SVP Cisco ASA5508 FirePOWER IPS and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-TAM-5Y | SVP Cisco ASA5508 FirePOWER IPS and AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5508-TAMC5Y | SVP Cisco ASA5508 FirePOWER IPS, AMP and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5516-P-5Y | SVP Cisco Defense Orchestrator for ASA5516 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5516-PN-5Y | SVP Cisco Defense Orchestrator for ASA5516 with FPWR 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5516-TA-5Y | SVP Cisco ASA5516 FirePOWER IPS 5-year subscription | See above for detailed guidance about replacement.. |
| L-S-ASA5516-TAC-5Y | SVP Cisco ASA5516 FirePOWER IPS and URL 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5516-TAM-5Y | SVP Cisco ASA5516 FirePOWER IPS and AMP 5-year subscription | See above for detailed guidance about replacement. |
| L-S-ASA5516-TAMC5Y | SVP Cisco ASA5516 FirePOWER IPS, AMP and URL 5-year subscription | See above for detailed guidance about replacement. |
| ASA5508-FPWR-BUN | ASA 5508-X with FirePOWER Services. Chassis and Subs. Bundle | See above for detailed guidance about replacement. |
| ASA5508-FTD-BUN | ASA 5508-X Firepower Threat Defense Chassis and Subs. Bundle | See above for detailed guidance about replacement. |
| ASA5508-FTD-HA-BUN | Cisco ASA5508X Firepower Threat Defense Chassis and Subs. Bundle | See above for detailed guidance about replacement. |
| ASA5516-FTD-HA-BUN | Cisco ASA5516X Firepower Threat Defense Chassis and Subs. Bundle | See above for detailed guidance about replacement. |
| ASA5516-FTD-BUN | ASA 5516-X Firepower Threat Defense Chassis and Subs. Bundle | See above for detailed guidance about replacement. |
| ASA5516-FPWR-BUN | ASA 5516-X with FirePOWER Services Chassis, Subs, FireSight Manager | See above for detailed guidance about replacement. |
Bias-free language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive language.