Cisco ASA 5500-X Series Firewalls — End-of-Life & EOSL Dates
The ASA 5500-X is Cisco's line of one-rack-unit and desktop next-generation firewalls that runs either classic ASA firewall software or Firepower Threat Defense on the same hardware. Across the models on Cisco's datasheet, stateful firewall throughput spans 750 Mbps on the desktop 5506-X to 4 Gbps on the 5555-X, with up to a million concurrent connections and IPsec VPN throughput to 700 Mbps.
Every model carries eight integrated Gigabit ports; the 5525-X and larger add a six-port copper or SFP expansion slot, a dedicated management port and, at the top of the range, dual power supplies. The services stack couples Firepower IPS, AMP malware protection and URL filtering with application control spanning more than 4,000 applications, managed locally or through Firepower Management Center.
Adaptive Security Appliance firewalls. Support dates split by model. The 5512-X/5515-X lack Secure Boot and were targeted in the ArcaneDoor attack campaign against out-of-support units.
Every tracked Cisco ASA 5500-X Series Firewalls SKU group is past Cisco end of service life (last group Aug 2026). Units in production should be treated as unsupported. For past-EOSL units, weigh third-party maintenance, spares, replacement, or a documented run-to-failure. Cisco’s named migration path: Cisco Firepower 2100 Series / Cisco Firepower 1000 Series.
Available
Sep 2012
End of sale
Aug 2017 – Aug 2021
Last date of support
Aug 2022 – Aug 2026
Part numbers
108
49
months past last support
Why this score
- Past end of service life — 49 months ago
- Vendor-published date, source-linked
- Vendor-named replacement / migration path available
- Category: firewall / security appliance
Support-lifecycle timing and source confidence only. Higher means more runway. It is not a risk, safety or compliance rating. How it is calculated
Past end of support and listed in the CISA Known Exploited Vulnerabilities catalog
11 catalogued vulnerabilities are associated with this product line, 11 of them linked to known ransomware campaigns. CISA lists these as actively exploited. This product is also past its last date of support, so the vendor no longer issues fixes for it. Past support on its own is a planning matter; both together is an audit finding, and for US federal agencies BOD 22-01 sets a remediation deadline.
CISA names product lines and software rather than part numbers, so each row states how it was matched. Confirm against the vendor advisory before acting: this augments vendor data, it does not replace it.
CISA Known Exploited Vulnerabilities catalog · catalogue 2026.09.11 · every tracked product past support and in KEV
Documented real-world exploitation of out-of-support units
Public security reporting documents active exploitation affecting this product line. It is summarised here because units past their last date of support no longer receive vendor fixes. This describes the published campaigns, not the state of any specific device.
Cisco Talos documented a state-sponsored campaign (UAT4356) implanting the Line Runner and Line Dancer backdoors on Cisco ASA devices, exploiting these two vulnerabilities. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog. ASA units past their last date of support no longer receive the fixed software.
Sources: Cisco Talos — ArcaneDoor report ↗ · CISA alert (2024-04-24) ↗
In September 2025 CISA ordered US federal agencies to identify and mitigate potentially compromised Cisco ASA and Firepower devices after active exploitation of these chained vulnerabilities, which allow a remote unauthenticated attacker to take full control of unpatched devices. End-of-support ASA hardware cannot receive the fixed releases and the directive's guidance is to permanently disconnect such devices.
Sources: CISA ED 25-03 ↗ · CISA alert (2025-09-25) ↗
Part numbers in this family
Dates vary across 4 groups in this family, so every row carries its own. Find your exact part before you plan.
| Part number | Description | End of sale | Last support | Status |
|---|---|---|---|---|
| ASA5512-K7 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-K8 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-K9 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-DC-K8 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-FPWR-K9 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-FPWR-BUN | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-ME-K8 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5512-ME-K9 | Cisco ASA 5512-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-K7 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-K8 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-K9 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-DC-K8 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-FPWR-K9 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-ME-K8 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5515-ME-K9 | Cisco ASA 5515-X adaptive security appliance | Aug 2017 | Aug 2022 | Past support |
| ASA5525-K7 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-CU-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-DC | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-DC-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-FPWR-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-FPWR-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5525-FTD-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-K7 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-CU-2AC-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-DC-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-FPWR-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-FPWR-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5545-FTD-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-K7 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-CU-2AC-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-DC-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-FPWR-K8 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-FPWR-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA5555-FTD-K9 | Sep 2020 | Sep 2025 | Past support | |
| ASA-IC-6GE-CU-B | ^ASA 5525-X Interface Card 6-port 10/100/1000, RJ-45 | Sep 2020 | Sep 2025 | Past support |
| ASA-IC-6GE-CU-C | ^^ASA 5545-X/5555-X Interface Card 6-port 10/100/1000, RJ-45 | Sep 2020 | Sep 2025 | Past support |
| ASA-IC-6GE-SFP-B | ^ASA 5525-X Interface Card 6-port GE SFP (SX,LH,LX) | Sep 2020 | Sep 2025 | Past support |
| ASA-IC-6GE-SFP-C | ^ASA 5545-X/5555-X Interface Card 6-port GE SFP (SX,LH,LX) | Sep 2020 | Sep 2025 | Past support |
| ASA-IC-6GECU-INC-B | ^ASA 5525-X Intf. Card 6-port 10/100/1000 (Incl. w/ Bundle) | Sep 2020 | Sep 2025 | Past support |
| ASA-IC-6GECU-INC-C | ^ASA 5545-X/5555-X Intf Card 6-port 10/100/1000 (Incl w/ Bdl) | Sep 2020 | Sep 2025 | Past support |
| ASA5500X-SSD-120G | ASA 5512-X through 5555-X 120GB MLC SSD | Sep 2020 | Sep 2025 | Past support |
| ASA5500X-SSD120INC | ^ASA 5512-X through 5555-X 120GB MLC SED SSD (Incl.) | Sep 2020 | Sep 2025 | Past support |
| ASA5525-EM750-K9 | ASA 5525-X w/750 AnyConnect Essentials and Mobile | Sep 2020 | Sep 2025 | Past support |
| ASA5525-SSL250-K9 | ASA 5525-X w/250 AnyConnect Premium/Adv EndPoint Assess | Sep 2020 | Sep 2025 | Past support |
| ASA5500-SW-CSD-K9 | ^ASA 5500 Series Secure Desktop Software | Sep 2020 | Sep 2025 | Past support |
| ASA5500-SW-SVC-K9 | ^ASA 5500 Series SSL VPN Client Software (7.x Only) | Sep 2020 | Sep 2025 | Past support |
| ASA5525-ME-K8 | ^ASA 5525-X Intercompany Media Engine K8 License | Sep 2020 | Sep 2025 | Past support |
| ASA5525-ME-K9 | ^ASA 5525-X Intercompany Media Engine K9 License | Sep 2020 | Sep 2025 | Past support |
| ASA5525T-BASE | ^Cisco ASA5525 Threat Defense Base License | Sep 2020 | Sep 2025 | Past support |
| ASA5545-ME-K8 | ^ASA 5545-X Intercompany Media Engine K8 License | Sep 2020 | Sep 2025 | Past support |
| ASA5545-ME-K9 | ^ASA 5545-X Intercompany Media Engine K9 License | Sep 2020 | Sep 2025 | Past support |
| ASA5545T-BASE | ^Cisco ASA5545 Threat Defense Base License | Sep 2020 | Sep 2025 | Past support |
| ASA5555-ME-K8 | ^ASA 5555-X Intercompany Media Engine K8 License | Sep 2020 | Sep 2025 | Past support |
| ASA5555-ME-K9 | ^ASA 5555-X Intercompany Media Engine K9 License | Sep 2020 | Sep 2025 | Past support |
| ASA5555T-BASE | ^Cisco ASA5555 Threat Defense Base License | Sep 2020 | Sep 2025 | Past support |
| ASA5508-K8 | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-FTD-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-FPWR-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-FTD-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-FTD-HA-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FPWR-K8 | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FPWR-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FTD-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FTD-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FPWR-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5516-FTD-HA-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5508-BRACKET | ASA 5508-X Bracket Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5508-FIPS-KIT | ASA 5508-X FIPS KIt | Aug 2021 | Aug 2026 | Past support |
| ASA5508-SEC-PL | ASA 5508-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + Conns | Aug 2021 | Aug 2026 | Past support |
| ASA5508-SSD | ASA 5508-X SSD | Aug 2021 | Aug 2026 | Past support |
| ASA5516-BRACKET | ASA 5516-X Bracket Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5516-FIPS-KIT | ASA 5516-X FIPS KIt | Aug 2021 | Aug 2026 | Past support |
| ASA5516-SSD | ASA 5516-X SSD | Aug 2021 | Aug 2026 | Past support |
| ASA5516T-BASE | Cisco ASA5516 Threat Defense Base License | Aug 2021 | Aug 2026 | Past support |
| ASA5500-SC-5 | ASA 5500 5 Security Contexts License | Aug 2021 | Aug 2026 | Past support |
| ASA5500-ENCR-K7 | ASA 5500 Strong Encryption License (3DES/AES) for NPE HW | Aug 2021 | Aug 2026 | Past support |
| ASA5500-ENCR-K8 | ASA 5500 Base Encryption Level (DES) | Aug 2021 | Aug 2026 | Past support |
| ASA5500-ENCR-K9 | ASA 5500 Strong Encryption License (3DES/AES) | Aug 2021 | Aug 2026 | Past support |
| ASA5506-K8 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506-SEC-BUN-K8 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506-SEC-BUN-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506-FPWR-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5506H-SP-BUN-K8 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506H-SP-BUN-K9 | Aug 2021 | Aug 2026 | Past support | |
| ASA5506H-FPWR-BUN | Aug 2021 | Aug 2026 | Past support | |
| ASA5506-FIPS-KIT | ASA 5506-X FIPS Kit | Aug 2021 | Aug 2026 | Past support |
| ASA5506-PWR-AC | ASA 5506-X Power Adaptor | Aug 2021 | Aug 2026 | Past support |
| ASA5506-RACK-MNT | ASA 5506-X Rackmount Kit Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5506-SEC-PL | ASA 5506 Sec. Plus Lic. w/ HA, DMZ, VLAN trunk, more conns. | Aug 2021 | Aug 2026 | Past support |
| ASA5506-SSD | ASA 5506-X SSD | Aug 2021 | Aug 2026 | Past support |
| ASA5506-WALL-MNT | ASA 5506-X Wal Mount | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-DIN-MNT | ASA 5506H-X DIN Rail Mount Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-PWR-AC | ASA 5506H-X Power Adaptor | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-RACK-MNT | ASA 5506H-X Rackmount Kit Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-SEC-PL | ASA 5506H-X Sec. Plus License | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-SSD | ASA 5506H-X SSD | Aug 2021 | Aug 2026 | Past support |
| ASA5506H-WALL-MNT | ASA 5506H-X Wall Mount Spare | Aug 2021 | Aug 2026 | Past support |
| ASA5506HT-BASE | Cisco ASA5506H Threat Defense Base License | Aug 2021 | Aug 2026 | Past support |
| ASA5506T-BASE | Cisco ASA5506 Threat Defense Base License | Aug 2021 | Aug 2026 | Past support |
| ASA5506WT-BASE | Cisco ASA5506W Threat Defense Base License | Aug 2021 | Aug 2026 | Past support |
Options from here
The Cisco ASA 5500-X Series Firewalls is past Cisco end of service life. These are the paths teams take from here:
Keep it in production past the OEM cutoff with an independent maintainer.
Buy spares now, while units still circulate on the secondary market.
It is unsupported today. Set a migration timeline and budget.
Low-criticality role: document the risk, harden backups, retire on your terms.
Independent and informational. EOSL.ai sells no hardware and no maintenance, and lists no paid placements. Third-party maintenance keeps unsupported gear in production past the OEM cutoff; whether it fits depends on the role the asset plays.
ASA 5500-X Series Firewalls — questions
Is the Cisco ASA 5500-X Series Firewalls end of life?
Yes. Every tracked 5500-X Series Firewalls SKU group is past its last date of support.
What is the last date of support for the 5500-X Series Firewalls?
Last dates of support across 5500-X Series Firewalls SKU groups range from Aug 2022 to Aug 2026.
Where do these 5500-X Series Firewalls dates come from?
Every end-of-sale and end-of-service-life date on this page links to the official Cisco EOL bulletin it was taken from.
What is the replacement for the 5500-X Series Firewalls?
Cisco's end-of-life bulletins list Cisco Firepower 2100 Series and Cisco Firepower 1000 Series as the recommended migration path for the 5500-X Series Firewalls. Exact per-part-number replacements are in the linked bulletins.