Cisco ASA 5500-X Series Firewalls

Data Sheets and Product Information

At-a-Glance

• Cisco ASA Botnet Traffic Filter (PDF - 696 KB)

Data Sheets

• Cisco ASA with FirePOWER Services

  • Cisco ASA 5585-X Series Next Generation Firewalls Data Sheet

• Software

  • Cisco IPS Software
• Cisco ASA 5505 Adaptive Security Appliance for Small Office or Branch Locations Data Sheet
• Cisco ASA 5500 Series Adaptive Security Appliances Data Sheet
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Module and Card
• Cisco ASA 5500 Series Content Security and Control Security Services Module
• Cisco ASA 5500 Series Unified Communications Deployments
• Cisco ASA 5500 and ASA 5500-X Series Next Generation Firewalls for the Internet Edge Data Sheet

End-of-Life and End-of-Sale Notices

• English

  • End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 3 YR Subscriptions
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 5 YR Subscriptions
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA CX Context-Aware Security and Cisco Prime Security Manager
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA5506W-X WiFi Security Appliances
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X Adaptive Security Appliance
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X with FirePOWER Services Modules and Subscriptions
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5505 Adaptive Security Appliance
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 1000V
  • EOL/EOS for the Cisco ASA 5580 Adaptive Security Appliance
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5550 Adaptive Security Appliances
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5510 Adaptive Security Appliance
  • End-of-Sale and End-of-Life Announcement for the Cisco ASA 5540 Adaptive Security Appliances

• French - Canadian

  • Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 3 YR Subscriptions

Q&A

• ASA FAQ: Why does the ASA send packets to the IPS module with no IPS policy configuration?
• Adaptive Security Appliance FAQ
• Cisco ASA 5500 Series Content Security Edition Licensing and Subscriptions
• Cisco ASA 5500 Series Content Security and Control Security Services Module
• Cisco ASA Software Release 8.2

Security Notices

Bulletins

• Cisco ASA 5585-X I/O Modules
• Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Software Release
• MS Word Template_102504

Field Notices

• Cisco ASA 5585-X Adaptive Security Appliance

  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended

• Cisco ASA 5580 Adaptive Security Appliance

  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended

• Cisco ASA 5555-X Adaptive Security Appliance

  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended
  • Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Hardware Upgrade Available
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended

Security Advisories, Responses and Notices

• Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability
• Cisco ASA 5500 Series Adaptive Security Appliance Clientless WebVPN Remote Denial of Service Vulnerability
• Cisco ASA 5500 Series Adaptive Security Appliance Cut-Through Proxy Authentication Information Disclosure Vulnerability
• Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability
• Cisco ASA Adaptive Security Appliance Clientless SSL VPN CIFS and FTP Credential Theft Vulnerability
• Cisco ASA Adaptive Security Appliance Software Clientless SSL VPN Rot13-Encoded Cross-Site Scripting Vulnerability
• Cisco ASA Adaptive Security Appliance Clientless SSL VPN DOM Cross-Site Scripting Vulnerability
• Cisco ASA Authenticated Linux Shell Access Vulnerability
• Cisco ASA CIFS Share Enumeration Denial of Service Vulnerability
• Cisco ASA Certificate Processing Denial of Service Vulnerability
• Cisco ASA Challenge-Response Tunnel Group Selection Bypass Vulnerability
• Cisco ASA Clientless SSL VPN CIFS Denial of Service Vulnerability
• Cisco ASA Clientless SSL VPN CIFS Heap Overflow Vulnerability
• Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability
• Cisco ASA Input Validation File Injection Vulnerability

Release and Compatibility

Compatibility Information

• Hardware and Software Compatibility

  • Cisco Firepower Compatibility Guide
  • Cisco ASA Compatibility
  • Cisco FXOS Compatibility

• Supported MIBs

  • MIBs Supported by Product (Select Adaptive Security Appliance from the Cisco Secure and VPN Products list)

• Supported VPN Platforms

  • Supported VPN Platforms, Cisco ASA 5500 Series

Release Notes

• ASA Series

  • Cisco ASA New Features by Release
  • Release Notes for the Cisco ASA Series, 9.14(x)
  • Release Notes for the Cisco ASA Series, 9.13(x)
  • Release Notes for the Cisco ASA Series, 9.12(x)
  • Release Notes for the Cisco ASA Series, 9.10(x)
  • Release Notes for the Cisco ASA Series, 9.9(x)
  • Release Notes for the Cisco ASA Series, 9.8(x)
  • Release Notes for the Cisco ASA Series, 9.7(x)
  • Release Notes for the Cisco ASA Series, 9.6(x)
  • Release Notes for the Cisco ASA Series, 9.5(x)
  • Release Notes for the Cisco ASA Series, 9.4(x)
  • Release Notes for the Cisco ASA Series, 9.3(x)
  • Release Notes for the Cisco ASA Series, 9.2(x)
  • Release Notes for the Cisco ASA Series, 9.1(x)
  • Release Notes for the Cisco ASA Series, 9.0(x)

Reference

Command References

• ASA Command Reference

  • Cisco ASA Series Command Reference, A - H Commands
  • Cisco ASA Series Command Reference, I - R Commands
  • Cisco ASA Series Command Reference, S Commands
  • Cisco ASA Series Command Reference, T - Z Commands and IOS Commands for the ASASM
  • show asp drop Command Usage

• Firepower Threat Defense Command Reference

  • Command Reference for Firepower Threat Defense

• Translations

  • Firepower Threat Defense용 명령 참조

Documentation Roadmaps

• Navigating the Cisco ASA Series Documentation
• Navigating the Cisco Firepower Documentation
• Start Here: Cisco ASA 5506-X
• Start Here: Cisco ASA 5506H-X
• Welcome to the ASA 5508-X and ASA 5516-X
• Welcome to the Cisco ASA 5585-X
• Welcome to the Cisco ASA 5505
• Welcome to the Cisco ASA 5500-X Series
• Welcome to the Cisco ASA Services Module

Licensing Information

• Feature Licenses for the Cisco ASA Series

  • Cisco ASA Series Feature Licenses
  • Cisco Firepower System Feature Licenses
  • Frequently Asked Questions (FAQ) about Firepower Licensing

• Open Source Licenses Used in the Firepower System

  • Open Source Licensing Information for Releases 6.4 and Later
  • Open Source Used In Cisco Firepower Version 6.3
  • Open Source Used In Cisco Firepower Version 6.2.3
  • Open Source Used In Cisco Firepower Version 6.2.2
  • Open Source Used In Firepower System Version 6.2
  • Open Source Used In Firepower System Version 6.1
  • Open Source Used In FireSIGHT System Version 5.4.1.x

• Open Source Licenses Used in the Cisco Active Directory Agent

  • Open Source Licensing Information
  • Open Source Used In Context Directory Agent 1.0

• Feature Licenses for AnyConnect Secure Mobility

  • AnyConnect Secure Mobility Client Features, Licenses, and OSs, Release 2.5

Design

Design Guides

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers
• Optimizing Your ASAv Deployment
• Using the Common Access Card for Remote Access VPN with the ASA 5500

Design TechNotes

• ASA 8.0 SSLVPN (WebVPN): Advanced Portal Customization
• ASA 8.x Dynamic Access Policies (DAP) Deployment Guide

Install and Upgrade

Install and Upgrade Guides

• Cisco ASA 5585-X Adaptive Security Appliance

  • Cisco ASA 5585-X Hardware Installation Guide
  • Cisco ASA 5585-X Quick Start Guide
  • Informations relatives à la sécurité et à la conformité pour les Cisco ASA 5585-X Adaptive Security Appliance (PDF - 520 KB)
  • Regulatory Compliance and Safety Information for the Cisco ASA 5585-X Adaptive Security Appliance

• Cisco ASA 5580 Adaptive Security Appliance

  • Regulatory Compliance and Safety Information for the Cisco ASA 5580 Adaptive Security Appliance

• Cisco ASA 5555-X Adaptive Security Appliance

  • Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide
  • Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Quick Start Guide
  • Informations relatives à la sécurité et à la conformité des appareils Cisco ASA 5500-X et des systèmes de prévention des intrusions IPS 4300 (PDF - 425 KB)
  • Regulatory Compliance and Safety Information for the Cisco ASA 5500-X Series Appliances and the Intrusion Prevention System 4300 Series Appliances

• Cisco ASA 5550 Adaptive Security Appliance

  • Cisco ASA 5510, ASA 5520, ASA 5540, and ASA 5550 Hardware Installation Guide
  • Cisco ASA 5510, ASA 5520, ASA 5540, and ASA 5550 Quick Start Guide
  • Regulatory Compliance and Safety Information for the Cisco ASA 5500 Series Adaptive Security Appliance

• Cisco ASA 5545-X Adaptive Security Appliance

  • Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Hardware Installation Guide
  • Cisco ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Quick Start Guide
  • Informations relatives à la sécurité et à la conformité des appareils Cisco ASA 5500-X et des systèmes de prévention des intrusions IPS 4300 (PDF - 425 KB)

Install and Upgrade TechNotes

• ASA SNMP Feature Enhancement Implementation
• Domain Controller Status Listed as Down in Active Directory Agent
• PIX/ASA: Upgrade a Software Image using ASDM or CLI Configuration Example

Configuration

Configuration Examples and TechNotes

• ASA Device Package

  • XML Examples for the Cisco Application Centric Infrastructure Security Device Package
  • XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(1)
  • XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(2)
  • XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(3)

• Allow and Block the Traffic Through the Security Appliance

  • ASA/PIX: BGP through ASA Configuration Example
• ASA 9.x : Upgrade a Software Image using ASDM or CLI Configuration Example
• ASA 9.x EIGRP Configuration Example
• ASA 9.x: AnyConnect VPN Client U-turning Configuration Examples
• ASA 9.x: Configure FTP/TFTP Services
• ASA 8.4(x) Connects a Single Internal Network to the Internet Configuration Example
• ASA 8.3 Issue: MSS Exceeded - HTTP Clients Cannot Browse to Some Websites
• ASA 8.3 and Later: Disable Default Global Inspection and Enable Non-Default Application Inspection using ASDM
• ASA 8.3 and Later: Enable FTP/TFTP Services Configuration Example
• ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example
• ASA 8.3 and Later: Mail (SMTP) Server Access on Outside Network Configuration Example

Configuration Guides

• ASA 9.14/ASDM 7.14

  • CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.14
  • CLI Book 2: Cisco ASA Series Firewall CLI Configuration Guide, 9.13
  • CLI Book 3: Cisco ASA Series VPN CLI Configuration Guide, 9.13
  • ASDM Book 1: Cisco ASA Series General Operations ASDM Configuration Guide, 7.14
  • ASDM Book 2: Cisco ASA Series Firewall ASDM Configuration Guide, 7.13
  • ASDM Book 3: Cisco ASA Series VPN ASDM Configuration Guide, 7.13

• ASA 9.13/ASDM 7.13

  • CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.13
  • CLI Book 2: Cisco ASA Series Firewall CLI Configuration Guide, 9.12
  • CLI Book 3: Cisco ASA Series VPN CLI Configuration Guide, 9.13
  • ASDM Book 1: Cisco ASA Series General Operations ASDM Configuration Guide, 7.12
  • ASDM Book 2: Cisco ASA Series Firewall ASDM Configuration Guide, 7.12
  • ASDM Book 3: Cisco ASA Series VPN ASDM Configuration Guide, 7.13

• ASA 9.12/ASDM 7.12

  • CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.12
  • CLI Book 2: Cisco ASA Series Firewall CLI Configuration Guide, 9.12
  • CLI Book 3: Cisco ASA Series VPN CLI Configuration Guide, 9.12

Programming Guides

• Cisco Firepower Threat Defense REST API Guide

Maintain and Operate

Maintain and Operate TechNotes

• Cisco ASA 5540 Adaptive Security Appliance

  • ASA Reloads Without crashinfo File When Large Files are Uploaded to Flash
• ASA VPN Load Balancing Master Election Process
• ASA/IPS FAQ:How does IPS display untranslated real IP addresses in event logs?
• EEM Examples for Different VPN Scenarios on ASA
• Optimize AnyConnect Split Tunnel for Microsoft Office 365 and Cisco Webex
• Q&A: On the ASA, when should the write standby command be used and what happens when it is used?

Troubleshooting

Error and System Messages

• ASA Syslog Guide

  • Cisco ASA Series Syslog Messages

• Firepower Threat Defense Syslog Guide

  • Cisco Firepower Threat Defense Syslog Messages
• Cisco Firepower Migration Tool Error Messages

Support FAQ

• ASA 5500 Series Adaptive Security Appliance FAQ
• ASA FAQ: How do you interpret the syslogs generated by the ASA when it builds or tears down connections?
• ASA FAQ: What happens after failover if dynamic routes are synchronized?
• AnyConnect Licensing Frequently Asked Questions (FAQ)
• Packet dropped counter in the show interface command output
• Q&A: On the ASA, when should the write standby command be used and what happens when it is used?
• What does the IPS message “IPS SSP application reloading IPS" mean?
• Why Does the ASA have xlate Entries with Idle Values Longer than the Configured Timeouts?

Troubleshooting Guides

• Cisco FXOS Troubleshooting for the Firepower 1000/2100 with ASA

Troubleshooting TechNotes

• Cisco ASA 5585-X Adaptive Security Appliance

  • Clustering Disabled on Slave ASA (RPC_SYSTEMERROR)

• Cisco ASA 5580 Adaptive Security Appliance

  • Clustering Disabled on Slave ASA (RPC_SYSTEMERROR)

• Cisco ASA 5540 Adaptive Security Appliance

  • ASA Reloads Without crashinfo File When Large Files are Uploaded to Flash

• Cisco ASA 5510 Adaptive Security Appliance

  • ASA "ERROR: [address_range] overlaps with failover interface address" Received After Upgrade

• IPSec

  • How Virtual Private Networks Work
  • IPsec Troubleshooting: Understanding and Using debug Commands

• Miscellaneous

  • U.S. Daylight Saving Time (DST) Changes for 2007 to Present
• ASA 5500-X: Clear a Console Connection to an Installed IPS/CX Module
• ASA 8.4(4): Certain Identity NAT Configuration Disallowed
• ASA 8.3 Issue: MSS Exceeded - HTTP Clients Cannot Browse to Some Websites
• ASA 8.3 and Later: Disable Default Global Inspection and Enable Non-Default Application Inspection using ASDM
• ASA 8.3 and Later: Monitor and Troubleshoot Performance Issues
• ASA 8.3: Establish and Troubleshoot Connectivity Through the Cisco Security Appliance
• ASA 8.2: Packet Flow through an ASA Firewall
• ASA 8.2: Port Redirection (Forwarding) with nat, global, static, and access-list Commands Using ASDM

Literature

Brochures

• Cisco ASA 5500 Series Content Security Edition for the Enterprise
• Cisco ASA 5500 Series Content Security and Control Security Services Module and the Children’s Internet Protection Act

Case Studies

• City of El Paso Customer Case Study (PDF - 430 KB)
• Frankfurt Airport transforms workplace efficiency with WiFi next generation (PDF - 253 KB)
• Genzyme deploys strict security constraints without impacting productivity (PDF - 608 KB)
• Oxford University Hospital Customer Case Study (PDF - 425 KB)
• Powering World Motor-Racing Events (PDF - 738 KB)
• Secure Data Center Solution Spurs Economic Growth (Case Study) (PDF - 1 MB)
• Stockholm's Tele2 Arena attains new levels in venue efficiency with Connected Stadium (PDF - 237 KB)
• Wireless quality gives Messe Frankfurt powerful tools with multiple benefits for events (PDF - 182 KB)

Presentations

• Cisco ASA with FirePOWER Services Excellence Award (PDF - 324 KB)

White Papers

• ASA 8.x Dynamic Access Policies (DAP) Deployment Guide
• Cisco and Public Sector Cyberdefense (PDF - 6 MB)
• Integrating the Cisco ASA with Cisco Nexus 9000 Series Switches and the Cisco Application Centric Infrastructure
• Miercom Report: Product Test Comparison of Cisco ASA 5520 (PDF - 511 KB)
• Next Generation Network Security for Data Center Protections (PDF - 520 KB)
• Remote-Access VPNs: Business Productivity, Deployment, and Security Considerations
• Securing Business Applications with Cisco ASA 5500 Series
• Securing the Data Center (PDF - 103 KB)
• The Cisco ASA 5500 as a Superior Firewall Solution

Translated Documents

Translated End-User Guides

• Command Reference Book - 中文(中国) (Chinese Simplified)

  • 思科 ASA 系列命令参考、ASASM 的 T 至 Z 命令 和 IOS 命令
  • 思科 ASA 系列命令参考、ASASM 的 T 至 Z 命令 和 IOS 命令
  • 思科 ASA 系列命令参考， I 至 R 命令
  • 思科 ASA 系列命令参考，A 至 H 命令
  • 思科 ASA 系列命令参考，S 命令

• Command Reference Book - 日本語(Japenese)

  • Cisco ASA シリーズ コマンド リファレンス、T ～ Z コマンドおよび ASASM の IOS コマンド
  • Cisco ASA シリーズ コマンド リファレンス、I ～ R のコマンド

• Command Reference Book - 한국어 (Korean)

  • Cisco ASA 시리즈 명령 참조, ASASM에 대한 T ~Z 명령 및 IOS 명령
  • Cisco ASA Series 명령 참조 , A ~ H 명령
  • Cisco ASA Series 명령 참조, S 명령 (PDF - 10 MB)
  • Cisco ASA Series 명령 참조, I~R 명령

• Configuration Guides - 中文(中国) (Chinese Simplified)

  • Firepower 管理中心配置指南，版本6.2.2
  • Firepower 管理中心配置指南，版本 6.2.3
  • CLI 书籍 1：思科 ASA 系列常规操作 CLI 配置指南，9.9
  • CLI 手册 2：思科 ASA 系列防火墙 CLI 配置指南，9.4