Firewalls de próxima generación Cisco ASA de la serie 5500-X

Fichas técnicas e información del producto

Fichas técnicas

• Cisco ASA 5500 Series Adaptive Security Appliances Data Sheet 08-Feb-2018
• Cisco ASA 5500 and ASA 5500-X Series Next Generation Firewalls for the Internet Edge Data Sheet 20-Oct-2016
• Cisco ASA 5505 Adaptive Security Appliance for Small Office or Branch Locations Data Sheet 01-Jun-2016
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Module and Card 19-Aug-2014
• Cisco ASA 5500 Series Unified Communications Deployments 23-Dec-2013
• Cisco ASA 5500 Series Content Security and Control Security Services Module 26-Jul-2006

Notificaciones de fin de vida útil y fin de venta

• End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions 24-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 1 YR Subscriptions 15-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 02-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 02-Mar-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 31-Aug-2021
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 31-Aug-2021
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 5 YR Subscriptions 05-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5505 Adaptive Security Appliance 01-Apr-2019
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X 01-Apr-2019
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5512-X et Cisco ASA 5515-X 08-Sep-2018

Preguntas y respuestas

• Cisco ASA Software Release 8.2 29-Jul-2020
• Preguntas frecuentes sobre ASA: ¿Cómo interpreta los syslogs generados por el ASA cuando construye o destruye las conexiones? 19-Aug-2015
• Preguntas frecuentes sobre ASA: ¿Qué ocurre después de la conmutación por fallas si las rutas dinámicas están sincronizadas? 10-Aug-2015
• Adaptive Security Appliance FAQ 01-Jul-2014
• Contador caído de paquetes en el resultado del comando show interface 31-Aug-2012
• Preguntas frecuentes sobre ASA 5500 Series Adaptive Security Appliance 02-Mar-2012

Resumen

• Cisco ASA Botnet Traffic Filter 23-Dec-2013 (PDF - 696 KB)

Avisos de seguridad

Advertencias de seguridad, respuestas y notificaciones

• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 09-Nov-2022
• Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability 09-Nov-2022
• Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022 09-Sep-2022
• Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability 10-Aug-2022
• Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability 22-Jun-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability 27-Apr-2022

Boletines

• Software Lifecycle Support Statement - Next Generation Firewall (NGFW) 21-Oct-2022
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021

Field Notices

• Applicable to Multiple Models

  • Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended 16-Mar-2023
  • Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended 06-Mar-2023
  • Field Notice: FN - 72103 - ASA, FXOS and Firepower Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, And Other Functionality - Software Upgrade Recommended 24-Mar-2022
  • Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided 03-Sep-2021
  • Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended 07-Jan-2021
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended 15-Jul-2020
  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended 26-Feb-2020
  • Field Notice: FN - 63705 - ASA 5500-X Appliances - Default IPS Software Might Not Be Installed - Software Upgrade Recommended 19-Mar-2019
  • Field Notice: FN - 63521 - ASA5500-X Appliance - Units shipped without default configuration - Configuration Change Recommended 19-Mar-2019
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended 15-Nov-2018
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64227 - ASA Software - Some Commands Might Fail on ASA 5500-X Security Appliances - Software Upgrade Recommended 11-Oct-2017
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended 10-Oct-2017

• Dispositivo de seguridad adaptable Cisco ASA 5505

  • Field Notice: FN - 63742 - ASA 5505 Series Appliances - Some Appliances Might Fail to Boot Up After a Power Cycle - Replace on Failure 23-Aug-2018
  • Field Notice: FN - 63146 - Third Party VPN Connection May Cause Unintended VPN Interruption for Other Connected Users 12-Aug-2008
• Field Notice: FN - 62378 - ASA Hardware and Software Compatibility Issue Due to a Component Change 17-Apr-2006

Versión y compatibilidad

Información sobre Compatibilidad

• Cisco Secure Firewall ASA Compatibility 22-Mar-2023
• Cisco Secure Firewall Migration Tool Compatibility Guide 01-Feb-2023
• Supported VPN Platforms, Cisco Secure Firewall ASA Series 20-Jul-2022
• Cisco Firepower Classic Device Compatibility Guide 06-May-2022

Release Notes

• Cisco Secure Firewall ASA New Features by Release 22-Mar-2023
• Cisco Secure Firewall Management Center New Features by Release 20-Mar-2023
• Cisco Secure Firewall Device Manager New Features by Release 15-Mar-2023
• Cisco Firepower Release Notes, Version 6.4 21-Nov-2022
• Release Notes for the Cisco ASA Series, 9.14(x) 15-Nov-2022
• Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes 10-Aug-2022
• Cisco Firepower Release Notes, Version 6.3.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.5.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.2.3 Patches 29-May-2022
• Firepower 마이그레이션 툴 릴리즈 노트 29-Apr-2021 (PDF - 265 KB)
• Firepower 마이그레이션 툴 릴리즈 노트 23-Mar-2021 (PDF - 265 KB)
• Release Notes for the Cisco ASA Device Package Software, Version 1.3(12) for ACI 02-Oct-2020
• Release Notes for the Cisco ASA Device Package Software, Version 1.2(12) for ACI 02-Oct-2020
• Cisco Firepower Release Notes, Version 6.2.3 16-Sep-2020
• Release Notes for the Cisco ASA Series, 9.9(x) 25-Aug-2020

Referencia

Información

• Cisco Secure Firewall ASA Series Feature Licenses 10-Jan-2023
• Cisco Secure Firewall Management Center Feature Licenses 29-Nov-2022
• Frequently Asked Questions (FAQ) about Licensing 06-Jun-2022
• Open Source Used In Cisco Firepower Version 6.3 03-Dec-2018 (PDF - 19 MB)
• Open Source Used In Cisco Firepower Version 6.2.3 29-Mar-2018 (PDF - 17 MB)
• Open Source Used In Cisco Firepower Version 6.2.2 21-Aug-2017 (PDF - 15 MB)
• Open Source Used In FireSIGHT System Version 5.4.1.x 27-Jan-2017 (PDF - 7 MB)
• Open Source Used In Firepower System Version 6.1 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.2 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Context Directory Agent 1.0 11-Jun-2012 (PDF - 1 MB)
• Open Source Licensing Information 20-Jun-2011 (PDF - 252 KB)

Referencias de Comando

• Cisco Secure Firewall ASA Series Command Reference, S Commands 22-Mar-2023
• Cisco Secure Firewall ASA Series Command Reference, A-H Commands 22-Mar-2023
• Cisco Secure Firewall ASA Series Command Reference, I - R Commands 28-Feb-2023
• Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM 16-Feb-2023
• Cisco Secure Firewall Threat Defense Command Reference 25-Sep-2018

Roadmaps de Documentación

• Navigating the Cisco Secure Firewall Threat Defense Documentation 10-Mar-2023
• Navigating the Cisco Secure Firewall Migration Tool Documentation 01-Feb-2023
• Navigating the Cisco Secure Firewall ASA Series Documentation 28-Nov-2022
• Welcome to the Cisco ASA 5500-X Series 15-Jan-2016
• Welcome to the Cisco ASA 5505 10-Nov-2015
• Welcome to the Cisco ASA 5585-X 08-Oct-2013

Diseño

Guías de Diseño

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers 20-Mar-2020

Instalación y Actualización

Guías de Instalación y Actualización

• Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide 08-Mar-2023
• Secure Firewall Management Center and Threat Defense Management Network Administration 02-Mar-2023
• Cisco Secure Firewall ASA to Threat Defense Feature Mapping 28-Feb-2023
• Migrating Cisco Secure Firewall ASA to Threat Defense with the Migration Tool 02-Feb-2023
• Cisco Secure Firewall ASA Upgrade Guide 11-Jan-2023
• Migrating ASA with FirePOWER Services (FPS) Firewall to Secure Firewall Threat Defense with the Migration Tool 23-Nov-2022
• Migrating Fortinet Firewall to Secure Firewall Threat Defense with the Migration Tool 22-Nov-2022
• Migrating Palo Alto Networks Firewall to Secure Firewall Threat Defense with the Migration Tool 21-Nov-2022
• Migrating Check Point Firewall to Secure Firewall Threat Defense with the Migration Tool 16-Nov-2022
• Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance 29-May-2022
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.1_7 Quick Start Guide 12-Dec-2021 (PDF - 2 MB)
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.2 Quick Start Guide 02-Dec-2021 (PDF - 2 MB)
• Cisco ASA REST API Quick Start Guide 16-Jun-2021
• Migrating an ASA to an FDM-Managed Device Using Cisco Defense Orchestrator 06-May-2021
• Cisco ASA Quick Start Guide for APIC Integration, 1.3(11) 16-Jun-2020

Notas Técnicas de Instalación y Actualización

• Ejemplo de Configuración de la Actualización ASA 9.X de una Imagen de Software mediante el Uso de ASDM o CLI 09-Sep-2022

Configuración

Guías de Configuración

• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0 20-Oct-2022
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6 19-Oct-2022
• Firepower Management Center Configuration Guide, Version 6.4 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.5 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.6 02-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.2.3 02-Aug-2022
• Cisco Secure Firewall Threat Defense Hardening Guide, Version 7.2 27-Jun-2022
• Cisco Secure Firewall ASA HTTP Interface for Automation 21-Jun-2022
• Cisco Firepower Threat Defense Hardening Guide, Version 7.0 30-Apr-2022
• About the ASA REST API 13-Jul-2021
• Cisco Secure Firewall ASA Legacy Feature Guide 16-Jun-2021
• Cisco Secure Firewall ASA Botnet Traffic Filter Guide 16-Jun-2021
• Cisco Secure Firewall ASA Unified Communications Guide 16-Jun-2021
• SNMP Version 3 Tools Implementation Guide 16-Jun-2021
• Cisco ASA WCCP Traffic Redirection Guide 16-Jun-2021

Guías de Programación

• Cisco Secure Firewall Threat Defense REST API Guide 30-Apr-2019

Notas Técnicas y Ejemplos de Configuración

• Ejemplo de Configuración de Uso de Mapas de Atributo LDAP 15-Mar-2023
• Configuración del protocolo de gateway fronterizo ASA 19-Jan-2023
• Configuración de traducción de direcciones de red y ACL en un firewall ASA 14-Nov-2022
• Configuración del registro del sistema del dispositivo de seguridad adaptable (ASA) 04-Nov-2022
• Configuración de un túnel VPN de sitio a sitio con ASA y Strongswan 06-Oct-2022
• Configuración del tráfico U-turn de AnyConnect VPN Client en ASA 9.X 12-Aug-2022
• Configure VPN Filters on Cisco ASA 21-Jul-2022
• Configuración del ASA para links ISP redundantes o de respaldo 19-Jul-2022
• Configuración del inicio de sesión en FTD mediante el FMC 15-Jun-2022
• Configuración de FTD desde el archivo de configuración ASA con la herramienta de migración de Firepower 08-Feb-2022
• ASA: Ejemplo de Configuración de Túnel Inteligente con ASDM 22-Apr-2021
• Configuración de AnyConnect Secure Mobility Client con túneles divididos en ASA 21-Apr-2021
• Ejemplo de Configuración de ASA con Módulo CX/FirePower y Conector CWS 18-Nov-2020
• Guía de implementación del módulo Anyconnect OpenDNS Roaming Security 30-Oct-2020
• ASA: VPN de acceso remoto en modo multicontexto (AnyConnect) 06-Aug-2020

Mantenimiento y Funcionamiento

Notas Técnicas de Mantenimiento y Funcionamiento

• Optimice el túnel dividido de AnyConnect para Microsoft Office 365 y Cisco Webex 08-Apr-2020
• Ejemplos de EEM para Diferentes Escenarios de VPN en ASA 08-Sep-2014

Solución de problemas

Mensajes de Error y de Sistema

• Cisco Secure Firewall ASA Series Syslog Messages 06-Jun-2022
• Cisco Secure Firewall Threat Defense Syslog Messages 30-May-2022
• Cisco Secure Firewall Migration Tool Error Messages 29-Oct-2020

Notas Técnicas de Troubleshooting

• Utilizar depuraciones IKEv2 de ASA para VPN de sitio a sitio con PSK 10-Feb-2023
• Creación y eliminación de indicadores de conexión TCP ASA 11-Jan-2023
• Corregir las interrupciones del flujo de tráfico causadas por las reconexiones de AnyConnect 20-Dec-2022
• Build-Up and Teardown ASA TCP Connection Flags 01-Nov-2022
• Entender la sincronización de la tabla MAC de alta disponibilidad ASA en modo transparente con routers HSRP 18-Aug-2022
• Configuración del reenvío de puertos de ASA versión 9 con NAT 05-Aug-2022
• Configuración del túnel IKEv2 de sitio a sitio entre ASA y el router 21-Jul-2022
• Error al corregir los algoritmos criptográficos de AnyConnect con FIPS habilitado 20-Jul-2022
• Guía de solución de problemas de AnyConnect VPN Client: problemas comunes 23-Jul-2021
• CWS en el tráfico ASA a servidores internos bloqueado 29-Oct-2020
• Proceso de elección de Director de Balanceo de Carga VPN de ASA 12-Oct-2020
• Ejemplo de Configuración de Autenticación ASA Directa y de Corte 20-Aug-2020
• Descripción general de MPTCP y soporte de productos 20-Jun-2019
• Problema de ASA 8.3: MSS excedido - Los clientes HTTP no pueden navegar a algunos sitios web 07-Oct-2018
• Teléfono de AnyConnect VPN del Troubleshooting - Teléfonos IP, ASA, y CUCM 16-Apr-2018

Support FAQ

• Preguntas frecuentes sobre las licencias de AnyConnect 31-Aug-2022
• ¿Qué el mensaje IPS “aplicación IPS SSP que recarga el IPS” significa? 30-May-2016
• ASA FAQ: How do you interpret the syslogs generated by the ASA when it builds or tears down connections? 19-Aug-2015
• ASA FAQ: What happens after failover if dynamic routes are synchronized? 10-Aug-2015
• ASA: ¿Cuándo y por qué utilizar el comando write standby? 25-Mar-2013
• ¿Por qué ASA tiene entradas xlate con valores de inactividad más largos que los tiempos de espera configurados? 12-Mar-2013
• Packet dropped counter in the show interface command output 31-Aug-2012
• ASA 5500 Series Adaptive Security Appliance FAQ 02-Mar-2012

Documentación

Casos prácticos

• Oxford University Hospital Customer Case Study 15-Apr-2015 (PDF - 425 KB)
• City of El Paso Customer Case Study 13-Apr-2015 (PDF - 430 KB)
• Wireless quality gives Messe Frankfurt powerful tools with multiple benefits for events 09-Dec-2013 (PDF - 182 KB)
• Frankfurt Airport transforms workplace efficiency with WiFi next generation 30-Oct-2013 (PDF - 253 KB)

Presentaciones

• Cisco ASA with FirePOWER Services Excellence Award 16-Jun-2015 (PDF - 324 KB)

White Papers

• Guía de implementación de políticas de acceso dinámico (DAP) ASA 8.x 17-Sep-2008