Cisco ASA 5500-X Series Firewalls End-of-Life & EOSL Dates

The ASA 5500-X is Cisco's line of one-rack-unit and desktop next-generation firewalls that runs either classic ASA firewall software or Firepower Threat Defense on the same hardware. Across the models on Cisco's datasheet, stateful firewall throughput spans 750 Mbps on the desktop 5506-X to 4 Gbps on the 5555-X, with up to a million concurrent connections and IPsec VPN throughput to 700 Mbps.

Every model carries eight integrated Gigabit ports; the 5525-X and larger add a six-port copper or SFP expansion slot, a dedicated management port and, at the top of the range, dual power supplies. The services stack couples Firepower IPS, AMP malware protection and URL filtering with application control spanning more than 4,000 applications, managed locally or through Firepower Management Center.

Adaptive Security Appliance firewalls. Support dates split by model. Cisco’s advisory on continued attacks against its firewalls lists the 5512-X, 5515-X, 5525-X, 5545-X, 5555-X and 5585-X, which lack Secure Boot, as successfully compromised; the 5506-X, 5508-X and 5516-X support it.

Every tracked Cisco ASA 5500-X Series Firewalls SKU group is past Cisco end of service life (last group Aug 2026). Units in production should be treated as unsupported. For past-EOSL units, weigh third-party maintenance, spares, replacement, or a documented run-to-failure. Cisco’s named migration path: Cisco Firepower 2100 Series / Cisco Firepower 1000 Series.