Pare-feu de nouvelle génération Cisco ASA, série 5500-X

Feuilles de données et informations sur les produits

Aperçu

• Cisco ASA Botnet Traffic Filter 23-Dec-2013 (PDF - 696 KB)

Avis de fin de vie et de fin de commercialisation

• End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions 24-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 1 YR Subscriptions 15-Mar-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 31-Aug-2021
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 31-Aug-2021
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software 01-Feb-2021
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5512-X et Cisco ASA 5515-X 08-Sep-2018
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 5 YR Subscriptions 31-Aug-2018
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506W-X WiFi Security Appliances 31-Aug-2018
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5585-X Adaptive Security Appliance 01-Dec-2017
• Annonce d’arrêt de commercialisation et de fin de vie de l’appareil de sécurité adaptatif Cisco ASA 5505 27-Sep-2017
• End-of-Sale and End-of-Life Announcement for the Cisco ASA CX Context-Aware Security and Cisco Prime Security Manager 28-Jul-2015
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 1000V 02-Sep-2014

Fiches techniques

• Cisco ASA 5500 Series Adaptive Security Appliances Data Sheet 08-Feb-2018
• Cisco ASA 5500 and ASA 5500-X Series Next Generation Firewalls for the Internet Edge Data Sheet 20-Oct-2016
• Cisco ASA 5505 Adaptive Security Appliance for Small Office or Branch Locations Data Sheet 01-Jun-2016
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Module and Card 19-Aug-2014
• Cisco ASA 5500 Series Unified Communications Deployments 23-Dec-2013
• Cisco ASA 5500 Series Content Security and Control Security Services Module 26-Jul-2006

Questions et réponses

• Cisco ASA Software Release 8.2 29-Jul-2020
• FAQ ASA : Comment interprétez-vous les syslogs générés par l'ASA lorsqu'il crée ou détruit des connexions ? 19-Aug-2015
• FAQ ASA : Que se passe-t-il après le basculement si les routes dynamiques sont synchronisées ? 10-Aug-2015
• FAQ sur les appareils de sécurité adaptatifs de la gamme ASA 5500 02-Mar-2012

Notifications de sécurité

Avis de problème constaté

• Applicable to Multiple Models

  • Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended 03-Aug-2023
  • Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended 06-Mar-2023
  • Field Notice: FN - 72103 - ASA, FXOS and Firepower Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, And Other Functionality - Software Upgrade Recommended 24-Mar-2022
  • Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided 03-Sep-2021
  • Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended 07-Jan-2021
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended 15-Jul-2020
  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended 26-Feb-2020
  • Field Notice: FN - 63705 - ASA 5500-X Appliances - Default IPS Software Might Not Be Installed - Software Upgrade Recommended 19-Mar-2019
  • Field Notice: FN - 63521 - ASA5500-X Appliance - Units shipped without default configuration - Configuration Change Recommended 19-Mar-2019
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended 15-Nov-2018
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64227 - ASA Software - Some Commands Might Fail on ASA 5500-X Security Appliances - Software Upgrade Recommended 11-Oct-2017
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended 10-Oct-2017

• Appareil de sécurité adaptatif Cisco ASA 5505

  • Field Notice: FN - 63742 - ASA 5505 Series Appliances - Some Appliances Might Fail to Boot Up After a Power Cycle - Replace on Failure 23-Aug-2018
  • Field Notice: FN - 63146 - Third Party VPN Connection May Cause Unintended VPN Interruption for Other Connected Users 12-Aug-2008
• Field Notice: FN - 62378 - ASA Hardware and Software Compatibility Issue Due to a Component Change 17-Apr-2006

Bulletins

• Software Lifecycle Support Statement - Next Generation Firewall (NGFW) 21-Oct-2022
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021

Conseils, mesures et avis de sécurité

• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Unauthorized Access Vulnerability 06-Sep-2023
• Cisco FXOS Software Arbitrary File Write Vulnerability 23-Aug-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 2100 Series Appliances SSL/TLS Denial of Service Vulnerability 07-Jun-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability 22-Mar-2023
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 09-Nov-2022
• Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability 09-Nov-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability 09-Nov-2022
• Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022 09-Sep-2022
• Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability 10-Aug-2022
• Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability 22-Jun-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability 27-Apr-2022

Version et compatibilité

Informations de compatibilité

• Supported VPN Platforms, Cisco Secure Firewall ASA Series 08-Sep-2023
• Cisco Secure Firewall ASA Compatibility 07-Sep-2023
• Guide de compatibilité de l'outil de migration Cisco Secure Firewall 02-Feb-2023
• Cisco Firepower Classic Device Compatibility Guide 06-May-2022

Notes de version

• Cisco Secure Firewall Management Center New Features by Release 27-Sep-2023
• Cisco Secure Firewall Device Manager New Features by Release 27-Sep-2023
• Cisco Secure Firewall ASA New Features by Release 07-Sep-2023
• Cisco Firepower Release Notes, Version 6.4 21-Nov-2022
• Release Notes for the Cisco ASA Series, 9.14(x) 15-Nov-2022
• Cisco Firepower Release Notes, Version 6.2.3 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.3.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.5.0 Patches 29-May-2022
• Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes 21-Dec-2021
• Firepower 마이그레이션 툴 릴리즈 노트 29-Apr-2021 (PDF - 265 KB)
• Firepower 마이그레이션 툴 릴리즈 노트 23-Mar-2021 (PDF - 265 KB)
• Release Notes for the Cisco ASA Device Package Software, Version 1.3(12) for ACI 02-Oct-2020
• Release Notes for the Cisco ASA Device Package Software, Version 1.2(12) for ACI 02-Oct-2020
• Cisco Firepower Release Notes, Version 6.2.3 16-Sep-2020
• Release Notes for the Cisco ASA Series, 9.9(x) 25-Aug-2020

Référence

Informations de licence

• Frequently Asked Questions (FAQ) about Licensing 08-Sep-2023
• Cisco Secure Firewall ASA Series Feature Licenses 07-Sep-2023
• Cisco Secure Firewall Management Center Feature Licenses 07-Sep-2023
• Open Source Used In Cisco Firepower Version 6.3 03-Dec-2018 (PDF - 19 MB)
• Open Source Used In Cisco Firepower Version 6.2.3 29-Mar-2018 (PDF - 17 MB)
• Open Source Used In Cisco Firepower Version 6.2.2 21-Aug-2017 (PDF - 15 MB)
• Open Source Used In FireSIGHT System Version 5.4.1.x 27-Jan-2017 (PDF - 7 MB)
• Open Source Used In Firepower System Version 6.1 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.2 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Context Directory Agent 1.0 11-Jun-2012 (PDF - 1 MB)
• Open Source Licensing Information 20-Jun-2011 (PDF - 252 KB)

Plans de documentation

• Navigating the Cisco Secure Firewall Threat Defense Documentation 13-Sep-2023
• Navigating the Cisco Secure Firewall Migration Tool Documentation 01-Feb-2023
• Welcome to the Cisco ASA 5500-X Series 15-Jan-2016
• Welcome to the Cisco ASA 5505 10-Nov-2015
• Welcome to the Cisco ASA 5585-X 08-Oct-2013
• Navigation dans la documentation de la gamme Cisco ASA 5500 06-Dec-2010

Références de commande

• Cisco Secure Firewall Threat Defense Command Reference 15-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, A-H Commands 07-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, I - R Commands 07-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, S Commands 07-Sep-2023
• Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM 07-Sep-2023

Conception

Guides de conception

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers 20-Mar-2020

Installation et mise à niveau

Guides d'installation et mise à niveau

• Migrating Fortinet Firewall to Secure Firewall Threat Defense with the Migration Tool 14-Sep-2023
• Migrating Check Point Firewall to Secure Firewall Threat Defense with the Migration Tool 14-Sep-2023
• Migrating Palo Alto Networks Firewall to Secure Firewall Threat Defense with the Migration Tool 14-Sep-2023
• Cisco Secure Firewall ASA Upgrade Guide 07-Sep-2023
• Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide 07-Sep-2023
• Migration de pare-feu ASA avec les services FirePOWER (FPS) vers Firewall Threat Defense avec l’outil de migration 27-Jul-2023
• Faire migrer Cisco Secure Farewell ASA vers Threat Defense avec l'outil de migration 27-Jul-2023
• Migration d’une ASA vers un dispositif géré par FDM à l’aide de Cisco Defense Orchestrator 24-Jul-2023
• Cisco Secure Firewall ASA to Threat Defense Feature Mapping 28-Feb-2023
• Migrating Firewalls with the Firewall Migration Tool in Cisco Defense Orchestrator 21-Feb-2023
• Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance 29-May-2022
• Secure Firewall Management Center and Threat Defense Management Network Administration 16-Feb-2022
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.1_7 Quick Start Guide 12-Dec-2021 (PDF - 2 MB)
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.2 Quick Start Guide 02-Dec-2021 (PDF - 2 MB)
• Cisco ASA REST API Quick Start Guide 16-Jun-2021

Notes techniques d'installation et mise à niveau

• Exemple de configuration de la mise à niveau ASA 9.X d'une image logicielle à l'aide d'ASDM ou de CLI 09-Sep-2022

Configuration

Exemples et notes techniques de configuration

• Configuration du trafic U-turn du client VPN AnyConnect sur ASA 9.X 11-Sep-2023
• Configurer l’accès client AnyConnect au LAN local 21-Aug-2023
• Configuration de l'ASA pour les liaisons redondantes ou de secours du FAI 08-Aug-2023
• Configuration de l'ASA : installation et renouvellement de certificats numériques SSL 03-Aug-2023
• Guide d'utilisation du pare-feu ASA sécurisé 02-Aug-2023
• Configurez la connexion sur Cisco FTD à l’aide de Cisco FMC 10-Jul-2023
• Exemple de configuration de mappages d'attributs LDAP 15-Mar-2023
• Configuration du protocole de passerelle de périphérie ASA 19-Jan-2023
• Configurer la traduction d'adresses réseau et les ACL sur un pare-feu ASA 14-Nov-2022
• Configuration du Syslog ASA (Adaptive Security Appliance) 04-Nov-2022
• Configurer un tunnel VPN site à site avec ASA et Strongswan 06-Oct-2022
• Configure VPN Filters on Cisco ASA 21-Jul-2022
• Configuration de l'ASA pour les liaisons redondantes ou de secours du FAI 19-Jul-2022
• Configurer FTD à partir du fichier de configuration ASA avec l'outil de migration Firepower 08-Feb-2022
• ASA : Exemple de configuration de tunnel SMART avec ASDM 22-Apr-2021

Guides de configuration

• Firepower Management Center Configuration Guide, Version 6.0.1 21-Aug-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6 18-May-2023
• Firepower Management Center Configuration Guide, Version 6.0 04-Apr-2023
• Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0 20-Oct-2022
• Firepower Management Center Configuration Guide, Version 6.4 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.5 03-Aug-2022
• Firepower Management Center Configuration Guide, Version 6.2.3 02-Aug-2022
• Cisco Secure Firewall Threat Defense Hardening Guide, Version 7.2 27-Jun-2022
• Cisco Secure Firewall ASA HTTP Interface for Automation 21-Jun-2022
• Firepower Management Center Configuration Guide, Version 6.6 25-May-2022
• Cisco Firepower Threat Defense Hardening Guide, Version 7.0 30-Apr-2022
• About the ASA REST API 13-Jul-2021
• Cisco Secure Firewall ASA Legacy Feature Guide 16-Jun-2021
• Cisco Secure Firewall ASA Botnet Traffic Filter Guide 16-Jun-2021
• Cisco Secure Firewall ASA Unified Communications Guide 16-Jun-2021

Guides de programmation

• Cisco Secure Firewall Threat Defense REST API Guide 30-Apr-2019

Maintenance et utilisation

Notes techniques de maintenance et d'utilisation

• Optimiser le tunnel partagé AnyConnect pour Microsoft Office 365/Webex 13-Jun-2023
• Exemples EEM pour différents scénarios VPN sur ASA 08-Sep-2014

Dépannage

Messages d'erreur et de système

• Cisco Secure Firewall ASA Series Syslog Messages 07-Sep-2023
• Cisco Secure Firewall Threat Defense Syslog Messages 07-Sep-2023
• Cisco Secure Firewall Migration Tool Error Messages 29-Oct-2020

Notes techniques de dépannage

• Configuration d'un tunnel IKEv2 site à site entre ASA et le routeur 29-Aug-2023
• Surveillance et dépannage des problèmes de performances ASA 24-Mar-2023
• Utiliser les débogages ASA IKEv2 pour VPN site à site avec PSK 10-Feb-2023
• Indicateurs de connexion TCP ASA de mise en place et de démontage 11-Jan-2023
• Corriger les interruptions de flux de trafic provoquées par les reconnexions AnyConnect 20-Dec-2022
• Comprendre la synchronisation des tables MAC haute disponibilité ASA en mode transparent avec les routeurs HSRP 18-Aug-2022
• Configuration du transfert de port ASA version 9 avec NAT 05-Aug-2022
• Résolution des erreurs d'algorithmes de chiffrement AnyConnect avec FIPS activé 20-Jul-2022
• Guide de dépannage de client VPN AnyConnect – Problèmes fréquents 23-Jul-2021
• CWS sur le trafic ASA vers les serveurs internes bloqué 29-Oct-2020
• Processus de sélection du directeur de l'équilibrage de charge VPN ASA 12-Oct-2020
• Exemple de configuration de l'authentification ASA directe et cut-through 20-Aug-2020
• Présentation de l'assistance produit et MPTCP 20-Jun-2019
• Problème ASA 8.3 : MSS dépassé - Les clients HTTP ne peuvent pas accéder à certains sites Web 07-Oct-2018
• Dépannez le téléphone d'AnyConnect VPN - Téléphones IP, ASA, et CUCM 16-Apr-2018

Support FAQ

• Queest-ce que le message « application IPS IPS SSP rechargeant l'IPS » signifie ? 30-May-2016
• ASA FAQ: How do you interpret the syslogs generated by the ASA when it builds or tears down connections? 19-Aug-2015
• ASA FAQ: What happens after failover if dynamic routes are synchronized? 10-Aug-2015
• ASA : quand et pourquoi utiliser la commande write standby ? 25-Mar-2013
• Pourquoi les entrées xlate de l'ASA ont-elles des valeurs d'inactivité plus longues que les délais d'attente configurés ? 12-Mar-2013
• ASA 5500 Series Adaptive Security Appliance FAQ 02-Mar-2012

Écrits

Études de cas

• Oxford University Hospital Customer Case Study 15-Apr-2015 (PDF - 425 KB)
• Wireless quality gives Messe Frankfurt powerful tools with multiple benefits for events 09-Dec-2013 (PDF - 182 KB)
• Frankfurt Airport transforms workplace efficiency with WiFi next generation 30-Oct-2013 (PDF - 253 KB)