Create and import an ASA model to Security Cloud Control Firewall Management

Updated: August 31, 2026

Want to summarize with AI?

Configure an ASA model to Security Cloud Control Firewall Management, including configuration file import, device identity, labels, and offline policy setup.

This task allows you to create and import an ASA model to Security Cloud Control Firewall Management, enabling configuration management and offline policy setup for ASA devices.

Use this process when you need to download an ASA device configuration file from the management interface to your local computer for further configuration management tasks.

Procedure

	1.	From the Security Cloud Control Home page, click Firewall.
	2.	Choose Security Devices.
	3.	Click the Devices tab.
	4.	Click the ASA tab.
	5.	Select an ASA device. In the Management section, click Configuration.
	6.	To download the device configuration to your local computer, click Download. The ASA device configuration file is downloaded to your local computer and can be used for creating and importing an ASA model with device identity, labels, and offline policy configuration.

Import ASA configuration

Import your Cisco ASA configuration file to enable offline management of ASA security devices through the platform interface.

Use this procedure when you need to onboard ASA security devices for offline management by uploading existing configuration files to the platform.

Before you begin

The ASA running configuration file you are onboarding must be less than 4.5 MB. Confirm the size of the configuration file before you onboard it.

Follow these steps to import ASA configuration:

Procedure

	1.	From the Security Cloud Control Home page, click Firewall.
	2.	Choose Security Devices.
	3.	Click the add button () to import the configuration file.
	4.	Click Import configuration for offline management.
	5.	Select the Device Type as ASA.
	6.	Click Browse, and select the configuration file in text format to upload.
	7.	Once the configuration is verified, you are prompted to label the device or service. For more information about labels and label groups, refer to Labels and Label Groups.
	8.	After labeling your model device, you can view it in the Security Devices list. Note The configuration may take some time to be analyzed, depending on its size and the number of other devices or services.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.