Cisco ASA 5500-X con servicios FirePOWER

Fichas técnicas e información del producto

Fichas técnicas

• Cisco ASA 5500 Series Data Sheet 30-Mar-2020

Notificaciones de fin de vida útil y fin de venta

• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.14(x), Adaptive Security Virtual Appliance (ASAv) Release 9.14(x) and Adaptive Security Device Manager (ASDM) Release 7.14(x) 07-Feb-2023
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco Adaptive Security Appliance (ASA) Release 9.14(x), Adaptive Security Virtual Appliance (ASAv) Release 9.14(x) and Adaptive Security Device Manager (ASDM) Release 7.14(x) 07-Feb-2023
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive Security Device Manager(ASDM) 7.12(x) 29-Aug-2022
• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive Security Device Manager(ASDM) 7.12(x) 29-Aug-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions 28-Jun-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions 28-Jun-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions 24-Mar-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions 03-Mar-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco Adaptive Security Appliance (ASA) Release 9.8(x), Adaptive Security Virtual Appliance (ASAv) Release 9.8(x) and Adaptive Security Device Manager (ASDM) Release 7.8(x) 06-Aug-2021
• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.8(x), Adaptive Security Virtual Appliance (ASAv) Release 9.8(x) and Adaptive Security Device Manager (ASDM) Release 7.8(x) 06-Aug-2021
• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.15(x), Adaptive Security Virtual Appliance (ASAv) Release 9.15(x) and Adaptive Security Device Manager (ASDM) Release 7.15(x) 16-Dec-2020
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco Adaptive Security Appliance (ASA) Release 9.15(x), Adaptive Security Virtual Appliance (ASAv) Release 9.15(x) and Adaptive Security Device Manager (ASDM) Release 7.15(x) 16-Dec-2020
• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.13(x), Adaptive Security Virtual Appliance (ASAv) Release 9.13(x) and Adaptive Security Device Manager (ASDM) Release 7.13(x) 21-May-2020
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco Adaptive Security Appliance (ASA) Release 9.13(x), Adaptive Security Virtual Appliance (ASAv) Release 9.13(x) and Adaptive Security Device Manager (ASDM) Release 7.13(x) 21-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance software version 9.9.2 25-Nov-2019

Resumen

• Cisco ASA with FirePOWER Services 16-Mar-2020

Avisos de seguridad

Advertencias de seguridad, respuestas y notificaciones

• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 09-Nov-2022
• Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability 09-Nov-2022
• Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability 22-Jun-2022
• Software Advisory: Inoperable FTD Device/NetFlow Exporter after Reboot (CSCvv69991) 16-Sep-2020
• Cisco Firepower Management Center Static Credential Vulnerabilities 06-May-2020
• Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability 16-Aug-2019
• Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability 16-Aug-2019
• Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability 16-Aug-2019
• Cisco Secure Boot Hardware Tampering Vulnerability 13-May-2019
• SW_Advisory_AMP_cloud_infastructure_changes 16-Jan-2019 (PDF - 47 KB)
• SW_Advisory_CSCvj93913 27-Sep-2018
• Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability 26-Sep-2018
• Failures loading websites using TLS 1.3 with SSL inspection enabled 12-Mar-2018
• Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II 16-Oct-2017

Boletines

• Software Lifecycle Support Statement - Next Generation Firewall (NGFW) 21-Oct-2022

Field Notices

• Field Notice: FN - 72548 - Firepower Software: Log Files Might Consume Excessive Disk Space - Software Upgrade Recommended 30-Mar-2023
• Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended 16-Mar-2023
• Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended 06-Mar-2023
• Field Notice: FN - 72501 - Firepower Software: Automatic Software Downloads And Content Updates Might Fail After January 10, 2023 - Software Upgrade Recommended 12-Dec-2022
• Field Notice: FN - 72385 - Firepower Software: TCP Connections Disconnect When Idle Timeout is Configured - Software Upgrade Recommended 16-Aug-2022
• Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommended 25-Feb-2022
• Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided 03-Sep-2021
• Field Notice: FN - 72019 - ASA 5506 Series Security Appliances - Some Appliances Might Fail to Pass Traffic After 3.2 Years Of Uptime - Power Cycle Required - Software Upgrade Recommended 08-Jun-2021
• Field Notice: FN - 72105 - SUDI Certificate Expires When Registered to a PKI and Used to Configure Certain Functionalities on Cisco IOS and IOS XE Platforms - Workaround Provided 30-Apr-2021
• Field Notice: FN - 70614 - ASR1001-X, ASR1001-HX, and ASR1002-HX Routers with ROMMON Version 17.3(1r) Will Not Be Downgradable to Earlier Versions - Workaround Provided 12-Jan-2021
• Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended 07-Jan-2021
• Field Notice: FN - 70583 - Firepower Threat Defense - Vulnerability Database Update 331 Might Cause Snort To Restart - Configuration Change Recommended 12-Aug-2020
• Field Notice: FN - 70476 - ASA5508 and ASA5516 Security Appliances Might Fail After 18 Months or Longer Due to a Damaged Component - Hardware Upgrade Required 20-Jul-2020
• Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended 15-Jul-2020
• Field Notice: FN - 70549 - ASA5506, ASA5508, and ASA5516 Security Appliances - Some RMA Replacements Might Fail Due to a Rework Process Issue - Hardware Upgrade Available 29-Jun-2020

Versión y compatibilidad

Información sobre Compatibilidad

• Cisco Secure Firewall Threat Defense Compatibility Guide 10-May-2023
• Cisco Secure Firewall ASA Compatibility 09-May-2023
• Supported VPN Platforms, Cisco Secure Firewall ASA Series 20-Jul-2022

Release Notes

• Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes 15-May-2023
• Cisco Secure Firewall Management Center New Features by Release 12-May-2023
• Cisco Secure Firewall Device Manager New Features by Release 10-May-2023
• Cisco Firepower Release Notes, Version 6.6 10-May-2023
• Cisco Firepower Release Notes, Version 7.0 26-Apr-2023
• Cisco Secure Firewall ASA New Features by Release 26-Apr-2023
• Release Notes for the Cisco ASA Series, 9.16(x) 11-Jan-2023
• Cisco Firepower Release Notes, Version 6.4 21-Nov-2022
• Release Notes for the Cisco ASA Series, 9.14(x) 15-Nov-2022
• Cisco Firepower Release Notes, Version 6.3.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.7.x Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.5.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.7.0 29-May-2022
• Cisco Firepower Release Notes, Version 6.2.3 Patches 29-May-2022
• Release Notes for the Cisco ASA Series REST API 21-Jul-2021

Referencia

Información

• Cisco Secure Firewall ASA Series Feature Licenses 10-Jan-2023
• Cisco Secure Firewall Management Center Feature Licenses 29-Nov-2022
• Frequently Asked Questions (FAQ) about Licensing 06-Jun-2022
• Cómo convertir una PAK completa en una licencia inteligente para ASA Firepower 11-May-2021
• Open Source Used In Cisco Firepower Version 6.3 03-Dec-2018 (PDF - 19 MB)
• Open Source Used In Cisco Firepower Version 6.2.3 29-Mar-2018 (PDF - 17 MB)
• Open Source Used In Cisco Firepower Version 6.2.2 21-Aug-2017 (PDF - 15 MB)
• Open Source Used In FireSIGHT System Version 5.4.1.x 27-Jan-2017 (PDF - 7 MB)
• Open Source Used In Firepower System Version 6.1 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.2 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.0.1 07-Mar-2016 (PDF - 11 MB)
• Open Source Used In Firepower System Version 6.0 05-Nov-2015 (PDF - 12 MB)

Referencias de Comando

• Cisco Secure Firewall ASA Series Command Reference, I - R Commands 28-Mar-2023
• Cisco Secure Firewall ASA Series Command Reference, S Commands 22-Mar-2023
• Cisco Secure Firewall ASA Series Command Reference, A-H Commands 22-Mar-2023
• Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM 16-Feb-2023
• show asp drop Command Usage 03-Feb-2023
• Cisco Secure Firewall Threat Defense Command Reference 25-Sep-2018

Roadmaps de Documentación

• Navigating the Cisco Secure Firewall Threat Defense Documentation 10-Mar-2023
• Navigating the Cisco Secure Firewall ASA Series Documentation 28-Nov-2022
• Navigating the Cisco Secure Firewall Threat Defense Documentation 24-Nov-2021
• Start Here: Cisco ASA 5506H-X 11-Sep-2019
• Welcome to the ASA 5508-X and ASA 5516-X 08-Apr-2015
• Start Here: Cisco ASA 5506-X 18-Feb-2015

Diseño

Guías de Diseño

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers 20-Mar-2020

Instalación y Actualización

Guías de Instalación y Actualización

• Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide 08-Mar-2023
• Secure Firewall Management Center and Threat Defense Management Network Administration 02-Mar-2023
• Cisco Secure Firewall ASA to Threat Defense Feature Mapping 28-Feb-2023
• Cisco Secure Firewall ASA Upgrade Guide 11-Jan-2023
• Cisco Secure Firewall Threat Defense Upgrade Guide for Device Manager, Version 7.2 06-Jun-2022
• Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance 29-May-2022
• Cisco ASA 5508-X and 5516-X Getting Started Guide 29-May-2022
• Cisco Firepower Threat Defense Upgrade Guide for Firepower Device Manager, Version 7.1 01-Dec-2021
• Cisco ASA REST API Quick Start Guide 16-Jun-2021
• Cisco Firepower Management Center Upgrade Guide, Version 6.0–7.0 11-Oct-2019
• Cisco ASA REST API Quick Start Guide 05-Jun-2019
• Cisco ASA FirePOWER Module Quick Start Guide 08-Jan-2019
• Cisco ASA 5506-X Series Quick Start Guide 08-Jan-2019
• Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Management Center Quick Start Guide 03-Dec-2018
• Cisco Firepower Threat Defense for the ASA 5506-X Series and Firepower Device Manager Quick Start Guide 03-Dec-2018

Configuración

Guías de Configuración

• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.0 18-May-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6 18-May-2023
• CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.16 28-Mar-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0 20-Oct-2022
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.7 19-Oct-2022
• Firepower Management Center Configuration Guide, Version 7.0 20-Sep-2022
• Firepower Management Center Configuration Guide, Version 6.3 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.4 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.5 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.6 02-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.7 02-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.2.3 02-Aug-2022
• Cisco Secure Firewall ASA HTTP Interface for Automation 21-Jun-2022
• Cisco Secure Firewall Management Center (Version 7.2 and later) and SecureX Integration Guide 10-May-2022
• Firepower Integrations Overview Guide 01-Dec-2021

Guías de Programación

• Cisco Secure Firewall Threat Defense REST API Guide 30-Apr-2019

Notas Técnicas y Ejemplos de Configuración

• Applicable to Multiple Models

  • Instale un módulo SFR en un módulo de hardware ASA 5585-X 18-Feb-2015

• Cisco ASA 5506-X con servicios FirePOWER

  • Configuración del ASA 5506W-X con una configuración de IP no predeterminada o de VLAN múltiple 31-Mar-2016
• Configuración de la integración de Active Directory con el dispositivo Firepower para la autenticación de portal cautivo & de inicio de sesión único 07-Jun-2023
• Implementación de FireSIGHT Management Center en VMware ESXi 08-Aug-2017
• Configure Firesight Management Center para mostrar los recuentos de visitas por regla de acceso 27-Jul-2017
• Comprender la expansión de reglas en dispositivos FirePOWER 14-Jun-2017
• Configure el descifrado SSL en el módulo FirePOWER mediante ASDM (administración integrada) 19-Jul-2016
• Configuración de la integración de Active Directory con ASDM para el inicio de sesión único y la autenticación de portal cautivo (administración integrada) 17-Jul-2016
• Configuración de la Copia de Seguridad/Restauración de la Configuración en el Módulo FirePOWER a través de ASDM (Administración integrada) 28-Apr-2016
• Configuración de listas negras de IP mientras se utiliza Cisco Security Intelligence a través de ASDM (administración integrada) 28-Apr-2016
• Configuración de la política de intrusiones y la configuración de firmas en el módulo Firepower (administración integrada) 28-Apr-2016
• Configure el módulo de FirePOWER para la red AMP o el control de archivos con el ASDM. 11-Apr-2016
• Instalación de parches/actualizaciones en el módulo FirePOWER mediante ASDM (administración integrada) 26-Feb-2016
• Configuración del Registro en Firepower Module para Eventos de Sistema/Tráfico Usando ASDM (Administración integrada) 15-Jan-2016
• Administración del Módulo SFR sobre el Túnel VPN sin Switch LAN 11-Jan-2016
• Configuración de una Política de Inspección SSL en Cisco FireSIGHT System 21-Oct-2015

Solución de problemas

Mensajes de Error y de Sistema

• Cisco Secure Firewall ASA Series Syslog Messages 06-Jun-2022
• Cisco Secure Firewall Threat Defense Syslog Messages 30-May-2022

Notas Técnicas de Troubleshooting

• Solución de problemas del clúster de Firepower Threat Defense (FTD) 20-May-2021
• Utilice ASDM para administrar un módulo FirePOWER en un ASA 20-Aug-2019
• Procesamiento de una única secuencia de gran sesión (flujo de elefantes) por servicios Firepower 08-Jan-2019
• Configuración de la inteligencia de seguridad basada en dominios (política DNS) en el módulo FirePOWER con ASDM (administración integrada) 03-Jul-2018
• Contenidos: Documentos del TAC sobre FirePOWER Service, FireSIGHT System y AMP 12-Sep-2017
• Pautas para la descarga de datos de Firepower Management Center en dispositivos administrados 12-Sep-2017
• Cómo determinar el tráfico manejado por una instancia de Snort específica 27-Jul-2017
• Solución de problemas de filtrado de URL en un sistema FireSIGHT 15-Jun-2017
• Solución de problemas de ASA FirePOWER Module (SFR) Procedimientos de generación de archivos mediante ASDM (administración integrada) 11-Jan-2016

Documentación

Recursos de ventas

• Cisco Network Security Ordering Guide 04-May-2023