Межсетевые экраны нового поколения Cisco ASA серии 5500-X

Информационные бюллетени и сведения о продуктах

Вопросы и ответы

• AnyConnect Licensing Frequently Asked Questions (FAQ) 11-May-2022
• Cisco ASA Software Release 8.2 29-Jul-2020
• Adaptive Security Appliance FAQ 01-Jul-2014

Краткий обзор

• Cisco ASA Botnet Traffic Filter 23-Dec-2013 (PDF - 696 KB)

Технические характеристики

• Software

  • Cisco IPS Software 04-Apr-2008
• Cisco ASA 5500 Series Adaptive Security Appliances Data Sheet 08-Feb-2018
• Cisco ASA 5500 and ASA 5500-X Series Next Generation Firewalls for the Internet Edge Data Sheet 20-Oct-2016
• Cisco ASA 5505 Adaptive Security Appliance for Small Office or Branch Locations Data Sheet 01-Jun-2016
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Module and Card 19-Aug-2014
• Cisco ASA 5500 Series Unified Communications Deployments 23-Dec-2013
• Cisco ASA 5500 Series Content Security and Control Security Services Module 26-Jul-2006

Уведомления о снятии продуктов с производства и о прекращении продаж

• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 1 YR Subscriptions 15-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 02-Mar-2022
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 02-Mar-2022
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5512 & ASA5515 - 1Yr Subscriptions 31-Aug-2021
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5585-X with FirePOWER Services Modules -1Yr Subscriptions 31-Aug-2021
• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software 01-Feb-2021
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 3 YR Subscriptions 06-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance 5 YR Subscriptions 05-May-2020
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5505 Adaptive Security Appliance 01-Apr-2019
• End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X 01-Apr-2019
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA 5512-X et Cisco ASA 5515-X 08-Sep-2018
• Annonce d’arrêt de commercialisation et de fin de vie de Cisco ASA5506 Series Security Appliance 5 YR Subscriptions 31-Aug-2018

Уведомления о безопасности

Бюллетени

• End-of-Sale and End-of-Life Announcement for the Cisco Context Directory Agent (CDA) 22-Apr-2021

Рекомендации по вопросам безопасности, ответы и уведомления

• Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability 22-Jun-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability 27-Apr-2022
• Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability 20-Apr-2022
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability 27-Oct-2021
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerability 27-Oct-2021

Уведомления о дефектах

• Applicable to Multiple Models

  • Field Notice: FN - 72103 - ASA, FXOS and Firepower Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, And Other Functionality - Software Upgrade Recommended 24-Mar-2022
  • Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided 03-Sep-2021
  • Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended 07-Jan-2021
  • Field Notice: FN - 64291 - ASA and FTD Software - Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Reboot Required - Software Upgrade Recommended 15-Jul-2020
  • Field Notice: FN - 70467 - ASA Software - AnyConnect Connections Might Fail With TCP Connection Limit Exceeded Error - Software Upgrade Recommended 26-Feb-2020
  • Field Notice: FN - 63705 - ASA 5500-X Appliances - Default IPS Software Might Not Be Installed - Software Upgrade Recommended 19-Mar-2019
  • Field Notice: FN - 63521 - ASA5500-X Appliance - Units shipped without default configuration - Configuration Change Recommended 19-Mar-2019
  • Field Notice: FN - 70319 - ASA and FXOS Software - Change in Root Certificate Might Affect Smart Licensing and Smart Call Home Functionality - Software Upgrade Recommended 15-Nov-2018
  • Field Notice: FN - 70081 - ASA Software - ASA 5500-X Security Appliance Might Reboot When It Authenticates the AnyConnect Client - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64315 - ASA Software - Stale VPN Context Entries Cause ASA to Stop Traffic Encryption - Software Upgrade Recommended 20-Dec-2017
  • Field Notice: FN - 64227 - ASA Software - Some Commands Might Fail on ASA 5500-X Security Appliances - Software Upgrade Recommended 11-Oct-2017
  • Field Notice: FN - 64294 - ISA3000 Software Security Appliance Might Fail To Pass Traffic After 213 Days Of Uptime - Software Upgrade Recommended 10-Oct-2017

• Многофункциональное устройство обеспечения безопасности Cisco ASA 5505

  • Field Notice: FN - 63742 - ASA 5505 Series Appliances - Some Appliances Might Fail to Boot Up After a Power Cycle - Replace on Failure 23-Aug-2018
  • Field Notice: FN - 63146 - Third Party VPN Connection May Cause Unintended VPN Interruption for Other Connected Users 12-Aug-2008
• Field Notice: FN - 62378 - ASA Hardware and Software Compatibility Issue Due to a Component Change 17-Apr-2006

Выпуск и совместимость

Информация о совместимости

• Cisco Secure Firewall ASA Compatibility 23-Jun-2022
• Cisco Firepower Classic Device Compatibility Guide 06-May-2022
• Supported VPN Platforms, Cisco ASA Series 02-Dec-2021
• Cisco Firepower Migration Tool Compatibility Guide 30-Jul-2021

Комментарии к выпуску

• Cisco Secure Firewall Migration Tool Release Notes 27-Jun-2022
• Cisco Secure Firewall ASA New Features by Release 23-Jun-2022
• Release Notes for the Cisco ASA Series, 9.14(x) 08-Jun-2022
• Cisco Secure Firewall Device Manager New Features by Release 06-Jun-2022
• Cisco Secure Firewall Management Center New Features by Release 06-Jun-2022
• Cisco Firepower Release Notes, Version 6.4 Patches 01-Jun-2022
• Cisco Firepower Release Notes, Version 6.3.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.5.0 Patches 29-May-2022
• Cisco Firepower Release Notes, Version 6.2.3 Patches 29-May-2022
• Cisco Firepower Hotfix Release Notes 21-Dec-2021
• Firepower 마이그레이션 툴 릴리즈 노트 29-Apr-2021 (PDF - 265 KB)
• Firepower 마이그레이션 툴 릴리즈 노트 23-Mar-2021 (PDF - 265 KB)
• Release Notes for the Cisco ASA Device Package Software, Version 1.3(12) for ACI 02-Oct-2020
• Release Notes for the Cisco ASA Device Package Software, Version 1.2(12) for ACI 02-Oct-2020
• Release Notes for Cisco ASDM, 7.12(x) 18-Sep-2020

Ссылки

Информация

• Cisco Secure Firewall Management Center Feature Licenses 06-Jun-2022
• Frequently Asked Questions (FAQ) about Licensing 06-Jun-2022
• Cisco Secure Firewall ASA Series Feature Licenses 29-May-2022
• Open Source Used In Cisco Firepower Version 6.3 03-Dec-2018 (PDF - 19 MB)
• Open Source Used In Cisco Firepower Version 6.2.3 29-Mar-2018 (PDF - 17 MB)
• Open Source Used In Cisco Firepower Version 6.2.2 21-Aug-2017 (PDF - 15 MB)
• Open Source Used In FireSIGHT System Version 5.4.1.x 27-Jan-2017 (PDF - 7 MB)
• Open Source Used In Firepower System Version 6.1 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Firepower System Version 6.2 08-Aug-2016 (PDF - 14 MB)
• Open Source Used In Context Directory Agent 1.0 11-Jun-2012 (PDF - 1 MB)
• Open Source Licensing Information 20-Jun-2011 (PDF - 252 KB)

Планы подготовки документации

• Navigating the Cisco Secure Firewall Threat Defense Documentation 06-Jun-2022
• Navigating the Cisco Secure Firewall ASA Series Documentation 29-May-2022
• Navigating the Cisco Secure Firewall Migration Tool Documentation 30-Jul-2021
• Welcome to the Cisco ASA 5500-X Series 15-Jan-2016
• Welcome to the Cisco ASA 5505 10-Nov-2015
• Welcome to the Cisco ASA 5585-X 08-Oct-2013

Справочники по командам

• Cisco Secure Firewall ASA Series Command Reference, A-H Commands 01-Jun-2022
• Cisco Secure Firewall ASA Series Command Reference, S Commands 01-Jun-2022
• Cisco Secure Firewall ASA Series Command Reference, I - R Commands 01-Jun-2022
• Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM 01-Jun-2022
• Cisco Secure Firewall Threat Defense Command Reference 25-Sep-2018

Проектирование

Руководства по дизайну

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers 20-Mar-2020

Технические примечания по дизайну

• ASA 8.x Руководство по развертыванию политик динамического доступа (DAP) 09-Feb-2011
• ASA 8. 0 SSLVPN (WebVPN): Расширенная настройка портала 14-Feb-2008

Установка и обновление

Руководство по установке и модернизации

• Migrating Fortinet Firewall to Cisco Secure Firewall Threat Defense with the Cisco Secure Firewall Migration Tool 27-Jun-2022
• Migrating ASA with FirePOWER Services (FPS) Firewall to Cisco Secure Firewall Threat Defense with the Cisco Secure Firewall Migration Tool 27-Jun-2022
• Migrating ASA Firewall to Cisco Secure Firewall Threat Defense with the Cisco Secure Firewall Migration Tool 27-Jun-2022
• Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense with the Cisco Secure Firewall Migration Tool 27-Jun-2022
• Migrating Check Point Firewall to Cisco Secure Firewall Threat Defense with the Cisco Secure Firewall Migration Tool 27-Jun-2022
• Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide 21-Jun-2022
• Cisco Secure Firewall ASA Upgrade Guide 06-Jun-2022
• Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance 29-May-2022
• Secure Firewall Management Center and Threat Defense Management Network Administration 16-Feb-2022
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.1_7 Quick Start Guide 12-Dec-2021 (PDF - 2 MB)
• Cisco Firepower Management Center Remediation Module for ACI, Version 1.0.2 Quick Start Guide 02-Dec-2021 (PDF - 2 MB)
• Cisco ASA REST API Quick Start Guide 16-Jun-2021
• Migrating ASA to Firepower Threat Defense Using Cisco Defense Orchestrator 06-May-2021
• Cisco ASA Quick Start Guide for APIC Integration, 1.3(11) 16-Jun-2020
• Cisco ASA Quick Start Guide for APIC Integration, 1.3(12) 16-Jun-2020

Технические примечания по установке и модернизации

• PIX/ASA: пример настройки обновления образа программного обеспечения с помощью ASDM или интерфейса командной строки 01-Jan-1970

Настройка

Примеры конфигурации и технические примечания

• Configure Logging on FTD via FMC 15-Jun-2022
• Configure FTD from ASA Configuration File with Firepower Migration Tool 08-Feb-2022
• ASA: Smart Tunnel using ASDM Configuration Example 22-Apr-2021
• ASA with CX/FirePower Module and CWS Connector Configuration Example 18-Nov-2020
• AnyConnect OpenDNS Roaming Security Module Deployment Guide 30-Oct-2020
• ASA Use of LDAP Attribute Maps Configuration Example 28-Oct-2020
• ASA: Multi-Context Mode Remote-Access (AnyConnect) VPN 06-Aug-2020
• Time-based Activation-Key for AnyConnect on ASA 05-Aug-2020
• Configure a Site-to-Site VPN tunnel with ASA and Strongswan 04-Aug-2020
• Configure ASA VPN Posture with CSD, DAP and AnyConnect 4.0 02-Apr-2020
• PIX/ASA 7.x and Later: Mail (SMTP) Server Access on Outside Network Configuration Example 04-Feb-2020
• ASA 8.3 and Later: Mail (SMTP) Server Access on Outside Network Configuration Example 24-Jan-2020
• Туннель IKEv2 между участками ASA и примеры конфигурации маршрутизатора 14-Jan-2020
• Пример конфигурации пограничного межсетевого протокола (BGP) на ASA 23-Dec-2019
• ASA 7.x Manually Install 3rd Party Vendor Certificates for use with WebVPN Configuration Example 09-Dec-2019

Руководства по конфигурации

• Cisco Secure Firewall Threat Defense Hardening Guide, Version 7.2 27-Jun-2022
• Cisco Secure Firewall ASA HTTP Interface for Automation 21-Jun-2022
• Firepower Management Center Configuration Guide, Version 6.4 29-May-2022
• Firepower Management Center Configuration Guide, Version 6.6 29-May-2022
• Firepower Management Center Configuration Guide, Version 6.2.3 29-May-2022
• Firepower Management Center Configuration Guide, Version 6.5 29-May-2022
• Cisco Firepower Threat Defense Hardening Guide, Version 7.0 30-Apr-2022
• About the ASA REST API 13-Jul-2021
• Cisco Secure Firewall ASA Legacy Feature Guide 16-Jun-2021
• Cisco Secure Firewall ASA Botnet Traffic Filter Guide 16-Jun-2021
• Cisco Secure Firewall ASA Unified Communications Guide 16-Jun-2021
• SNMP Version 3 Tools Implementation Guide 16-Jun-2021
• Cisco ASA WCCP Traffic Redirection Guide 16-Jun-2021
• Cisco Secure Firewall ASA NetFlow Implementation Guide 16-Jun-2021
• Integrating Cisco ASA and Cisco Security Analytics and Logging (SaaS) using CLI and ASDM 17-Sep-2020

Руководства по программированию

• Cisco Secure Firewall Threat Defense REST API Guide 30-Apr-2019

Обслуживание и эксплуатация

Технические примечания по поддержке и эксплуатации

• Optimize AnyConnect Split Tunnel for Microsoft Office 365 and Cisco Webex 08-Apr-2020
• EEM Examples for Different VPN Scenarios on ASA 08-Sep-2014

Поиск и устранение неполадок

Support FAQ

• AnyConnect, лицензирование, часто задаваемые вопросы (FAQ) 22-Mar-2017
• What does the IPS message “IPS SSP application reloading IPS" mean? 30-May-2016
• ASA FAQ: How do you interpret the syslogs generated by the ASA when it builds or tears down connections? 19-Aug-2015
• ASA FAQ: What happens after failover if dynamic routes are synchronized? 10-Aug-2015
• ASA - When and why to use the write standby command? 25-Mar-2013
• Why Does the ASA have xlate Entries with Idle Values Longer than the Configured Timeouts? 12-Mar-2013
• Packet dropped counter in the show interface command output 31-Aug-2012
• ASA 5500 Series Adaptive Security Appliance FAQ 02-Mar-2012

Ошибки и системные сообщения

• Cisco Secure Firewall ASA Series Syslog Messages 06-Jun-2022
• Cisco Secure Firewall Threat Defense Syslog Messages 30-May-2022
• Cisco Firepower Migration Tool Error Messages 29-Oct-2020

Технические примечания по поиску и устранению неисправностей

• AnyConnect VPN Client Troubleshooting Guide - Common Problems 23-Jul-2021
• CWS on ASA Traffic to Internal Servers Blocked 29-Oct-2020
• ASA VPN Load Balancing Director Election Process 12-Oct-2020
• Cut-Through and Direct ASA Authentication Configuration Example 20-Aug-2020
• ASA 8.3 Issue: MSS Exceeded - HTTP Clients Cannot Browse to Some Websites 26-Nov-2019
• MPTCP and Product Support Overview 20-Jun-2019
• Troubleshoot AnyConnect VPN Phone - IP Phones, ASA, and CUCM 16-Apr-2018
• ASA Throughput and Connection Speed Troubleshooting and Analyzing Packet Captures 29-Mar-2018
• ASA - Troubleshoot ESMTP and SMTP Command Errors over Telnet 07-Aug-2017
• Disable Service Module Monitoring on ASA to Avoid Unwanted Failover Events (SFR/CX/IPS/CSC). 30-Jan-2017
• ASA 8.3 и более поздние версии: Наблюдение и устранение неполадок производительности 13-Jun-2016
• ASA IPsec and IKE Debugs (IKEv1 Main Mode) Troubleshooting TechNote 14-Mar-2016
• Troubleshoot ASA Interface Overrun Counter Errors 10-Mar-2016
• Differences Between Logs and Debugs on Adaptive Security Appliances 22-Feb-2016
• Troubleshoot AnyConnect Secure Mobility Client Upgrade Issues After a Microsoft Windows System Restore 15-Dec-2015

Литература

Брошюры

• Cisco ASA 5500 Series Content Security and Control Security Services Module and the Children’s Internet Protection Act 20-Jul-2020

Официальные документы

• ASA 8.x Руководство по развертыванию политик динамического доступа (DAP) 09-Feb-2011

Презентации

• Cisco ASA with FirePOWER Services Excellence Award 16-Jun-2015 (PDF - 324 KB)

Примеры внедрения

• Secure Data Center Solution Spurs Economic Growth (Case Study) 14-Nov-2015 (PDF - 1 MB)
• Oxford University Hospital Customer Case Study 15-Apr-2015 (PDF - 425 KB)
• City of El Paso Customer Case Study 13-Apr-2015 (PDF - 430 KB)
• Wireless quality gives Messe Frankfurt powerful tools with multiple benefits for events 09-Dec-2013 (PDF - 182 KB)
• Frankfurt Airport transforms workplace efficiency with WiFi next generation 30-Oct-2013 (PDF - 253 KB)