eosl.ai
homeCisco5500-X Series Firewalls

Cisco ASA 5500-X Series Firewalls — End-of-Life & EOSL Dates

PAST VENDOR SUPPORTCisco ended support in August 2026.

The ASA 5500-X is Cisco's line of one-rack-unit and desktop next-generation firewalls that runs either classic ASA firewall software or Firepower Threat Defense on the same hardware. Across the models on Cisco's datasheet, stateful firewall throughput spans 750 Mbps on the desktop 5506-X to 4 Gbps on the 5555-X, with up to a million concurrent connections and IPsec VPN throughput to 700 Mbps.

Every model carries eight integrated Gigabit ports; the 5525-X and larger add a six-port copper or SFP expansion slot, a dedicated management port and, at the top of the range, dual power supplies. The services stack couples Firepower IPS, AMP malware protection and URL filtering with application control spanning more than 4,000 applications, managed locally or through Firepower Management Center.

Adaptive Security Appliance firewalls. Support dates split by model. The 5512-X/5515-X lack Secure Boot and were targeted in the ArcaneDoor attack campaign against out-of-support units.

Every tracked Cisco ASA 5500-X Series Firewalls SKU group is past Cisco end of service life (last group Aug 2026). Units in production should be treated as unsupported. For past-EOSL units, weigh third-party maintenance, spares, replacement, or a documented run-to-failure. Cisco’s named migration path: Cisco Firepower 2100 Series / Cisco Firepower 1000 Series.

Available

Sep 2012

End of sale

Aug 2017 – Aug 2021

Last date of support

Aug 2022 – Aug 2026

Part numbers

108

Cisco EOL bulletin ↗5512-X / 5515-X (no Secure Boot) · verified Jul 2026
Cisco EOL bulletin ↗5525-X / 5545-X / 5555-X · verified Sep 2026
Cisco EOL bulletin ↗5508-X / 5516-X · verified Sep 2026
Cisco EOL bulletin ↗5506-X / 5506H-X · verified Sep 2026
Check your part numbers in bulk

49

months past last support

Support Runway Score16/100 · Little or no runway
Why this score
  • Past end of service life — 49 months ago
  • Vendor-published date, source-linked
  • Vendor-named replacement / migration path available
  • Category: firewall / security appliance

Support-lifecycle timing and source confidence only. Higher means more runway. It is not a risk, safety or compliance rating. How it is calculated

Figure 1. Cisco issues no software maintenance and no security fixes for this product. Third-party maintenance, spares or replacement are the paths from here. EOSL.ai sells none of them and takes no placement fee.

Past end of support and listed in the CISA Known Exploited Vulnerabilities catalog

11 catalogued vulnerabilities are associated with this product line, 11 of them linked to known ransomware campaigns. CISA lists these as actively exploited. This product is also past its last date of support, so the vendor no longer issues fixes for it. Past support on its own is a planning matter; both together is an audit finding, and for US federal agencies BOD 22-01 sets a remediation deadline.

CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Possible match · ransomware · added 2024-11-12 · federal due 2024-12-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability Possible match · ransomware · added 2024-10-24 · federal due 2024-11-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability Possible match · ransomware · added 2024-04-24 · federal due 2024-05-01 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability Possible match · ransomware · added 2024-04-24 · federal due 2024-05-01 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3259Cisco ASA and FTD Information Disclosure Vulnerability Possible match · ransomware · added 2024-02-15 · federal due 2024-03-07 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Possible match · ransomware · added 2023-09-13 · federal due 2023-10-04 Matched: CISA names "Adaptive Security Appliance" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2016-6366Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Possible match · ransomware · added 2022-05-24 · federal due 2022-06-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Possible match · ransomware · added 2022-05-24 · federal due 2022-06-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3452Cisco ASA and FTD Read-Only Path Traversal Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3580Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2018-0296Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗

CISA names product lines and software rather than part numbers, so each row states how it was matched. Confirm against the vendor advisory before acting: this augments vendor data, it does not replace it.

CISA Known Exploited Vulnerabilities catalog · catalogue 2026.09.11 · every tracked product past support and in KEV

Documented real-world exploitation of out-of-support units

Public security reporting documents active exploitation affecting this product line. It is summarised here because units past their last date of support no longer receive vendor fixes. This describes the published campaigns, not the state of any specific device.

ArcaneDoor espionage campaign (2024) CVE-2024-20353 · CVE-2024-20359

Cisco Talos documented a state-sponsored campaign (UAT4356) implanting the Line Runner and Line Dancer backdoors on Cisco ASA devices, exploiting these two vulnerabilities. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog. ASA units past their last date of support no longer receive the fixed software.

Sources: Cisco Talos — ArcaneDoor report ↗ · CISA alert (2024-04-24) ↗

CISA Emergency Directive ED 25-03 (2025) CVE-2025-20333 · CVE-2025-20362

In September 2025 CISA ordered US federal agencies to identify and mitigate potentially compromised Cisco ASA and Firepower devices after active exploitation of these chained vulnerabilities, which allow a remote unauthenticated attacker to take full control of unpatched devices. End-of-support ASA hardware cannot receive the fixed releases and the directive's guidance is to permanently disconnect such devices.

Sources: CISA ED 25-03 ↗ · CISA alert (2025-09-25) ↗

Part numbers in this family

Dates vary across 4 groups in this family, so every row carries its own. Find your exact part before you plan.

Part numberDescriptionEnd of saleLast supportStatus
ASA5512-K7Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-DC-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-FPWR-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-FPWR-BUNCisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-ME-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-ME-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K7Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-DC-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-FPWR-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-ME-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-ME-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5525-K7Sep 2020Sep 2025Past support
ASA5525-K8Sep 2020Sep 2025Past support
ASA5525-K9Sep 2020Sep 2025Past support
ASA5525-CU-K9Sep 2020Sep 2025Past support
ASA5525-DCSep 2020Sep 2025Past support
ASA5525-DC-K8Sep 2020Sep 2025Past support
ASA5525-FPWR-K8Sep 2020Sep 2025Past support
ASA5525-FPWR-K9Sep 2020Sep 2025Past support
ASA5525-FTD-K9Sep 2020Sep 2025Past support
ASA5545-K7Sep 2020Sep 2025Past support
ASA5545-K8Sep 2020Sep 2025Past support
ASA5545-K9Sep 2020Sep 2025Past support
ASA5545-CU-2AC-K9Sep 2020Sep 2025Past support
ASA5545-DC-K8Sep 2020Sep 2025Past support
ASA5545-FPWR-K8Sep 2020Sep 2025Past support
ASA5545-FPWR-K9Sep 2020Sep 2025Past support
ASA5545-FTD-K9Sep 2020Sep 2025Past support
ASA5555-K7Sep 2020Sep 2025Past support
ASA5555-K8Sep 2020Sep 2025Past support
ASA5555-K9Sep 2020Sep 2025Past support
ASA5555-CU-2AC-K9Sep 2020Sep 2025Past support
ASA5555-DC-K8Sep 2020Sep 2025Past support
ASA5555-FPWR-K8Sep 2020Sep 2025Past support
ASA5555-FPWR-K9Sep 2020Sep 2025Past support
ASA5555-FTD-K9Sep 2020Sep 2025Past support
ASA-IC-6GE-CU-B^ASA 5525-X Interface Card 6-port 10/100/1000, RJ-45Sep 2020Sep 2025Past support
ASA-IC-6GE-CU-C^^ASA 5545-X/5555-X Interface Card 6-port 10/100/1000, RJ-45Sep 2020Sep 2025Past support
ASA-IC-6GE-SFP-B^ASA 5525-X Interface Card 6-port GE SFP (SX,LH,LX)Sep 2020Sep 2025Past support
ASA-IC-6GE-SFP-C^ASA 5545-X/5555-X Interface Card 6-port GE SFP (SX,LH,LX)Sep 2020Sep 2025Past support
ASA-IC-6GECU-INC-B^ASA 5525-X Intf. Card 6-port 10/100/1000 (Incl. w/ Bundle)Sep 2020Sep 2025Past support
ASA-IC-6GECU-INC-C^ASA 5545-X/5555-X Intf Card 6-port 10/100/1000 (Incl w/ Bdl)Sep 2020Sep 2025Past support
ASA5500X-SSD-120GASA 5512-X through 5555-X 120GB MLC SSDSep 2020Sep 2025Past support
ASA5500X-SSD120INC^ASA 5512-X through 5555-X 120GB MLC SED SSD (Incl.)Sep 2020Sep 2025Past support
ASA5525-EM750-K9ASA 5525-X w/750 AnyConnect Essentials and MobileSep 2020Sep 2025Past support
ASA5525-SSL250-K9ASA 5525-X w/250 AnyConnect Premium/Adv EndPoint AssessSep 2020Sep 2025Past support
ASA5500-SW-CSD-K9^ASA 5500 Series Secure Desktop SoftwareSep 2020Sep 2025Past support
ASA5500-SW-SVC-K9^ASA 5500 Series SSL VPN Client Software (7.x Only)Sep 2020Sep 2025Past support
ASA5525-ME-K8^ASA 5525-X Intercompany Media Engine K8 LicenseSep 2020Sep 2025Past support
ASA5525-ME-K9^ASA 5525-X Intercompany Media Engine K9 LicenseSep 2020Sep 2025Past support
ASA5525T-BASE^Cisco ASA5525 Threat Defense Base LicenseSep 2020Sep 2025Past support
ASA5545-ME-K8^ASA 5545-X Intercompany Media Engine K8 LicenseSep 2020Sep 2025Past support
ASA5545-ME-K9^ASA 5545-X Intercompany Media Engine K9 LicenseSep 2020Sep 2025Past support
ASA5545T-BASE^Cisco ASA5545 Threat Defense Base LicenseSep 2020Sep 2025Past support
ASA5555-ME-K8^ASA 5555-X Intercompany Media Engine K8 LicenseSep 2020Sep 2025Past support
ASA5555-ME-K9^ASA 5555-X Intercompany Media Engine K9 LicenseSep 2020Sep 2025Past support
ASA5555T-BASE^Cisco ASA5555 Threat Defense Base LicenseSep 2020Sep 2025Past support
ASA5508-K8Aug 2021Aug 2026Past support
ASA5508-K9Aug 2021Aug 2026Past support
ASA5508-FTD-K9Aug 2021Aug 2026Past support
ASA5508-FPWR-BUNAug 2021Aug 2026Past support
ASA5508-FTD-BUNAug 2021Aug 2026Past support
ASA5508-FTD-HA-BUNAug 2021Aug 2026Past support
ASA5516-FPWR-K8Aug 2021Aug 2026Past support
ASA5516-FPWR-K9Aug 2021Aug 2026Past support
ASA5516-FTD-K9Aug 2021Aug 2026Past support
ASA5516-FTD-BUNAug 2021Aug 2026Past support
ASA5516-FPWR-BUNAug 2021Aug 2026Past support
ASA5516-FTD-HA-BUNAug 2021Aug 2026Past support
ASA5508-BRACKETASA 5508-X Bracket SpareAug 2021Aug 2026Past support
ASA5508-FIPS-KITASA 5508-X FIPS KItAug 2021Aug 2026Past support
ASA5508-SEC-PLASA 5508-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + ConnsAug 2021Aug 2026Past support
ASA5508-SSDASA 5508-X SSDAug 2021Aug 2026Past support
ASA5516-BRACKETASA 5516-X Bracket SpareAug 2021Aug 2026Past support
ASA5516-FIPS-KITASA 5516-X FIPS KItAug 2021Aug 2026Past support
ASA5516-SSDASA 5516-X SSDAug 2021Aug 2026Past support
ASA5516T-BASECisco ASA5516 Threat Defense Base LicenseAug 2021Aug 2026Past support
ASA5500-SC-5ASA 5500 5 Security Contexts LicenseAug 2021Aug 2026Past support
ASA5500-ENCR-K7ASA 5500 Strong Encryption License (3DES/AES) for NPE HWAug 2021Aug 2026Past support
ASA5500-ENCR-K8ASA 5500 Base Encryption Level (DES)Aug 2021Aug 2026Past support
ASA5500-ENCR-K9ASA 5500 Strong Encryption License (3DES/AES)Aug 2021Aug 2026Past support
ASA5506-K8Aug 2021Aug 2026Past support
ASA5506-K9Aug 2021Aug 2026Past support
ASA5506-SEC-BUN-K8Aug 2021Aug 2026Past support
ASA5506-SEC-BUN-K9Aug 2021Aug 2026Past support
ASA5506-FPWR-BUNAug 2021Aug 2026Past support
ASA5506H-SP-BUN-K8Aug 2021Aug 2026Past support
ASA5506H-SP-BUN-K9Aug 2021Aug 2026Past support
ASA5506H-FPWR-BUNAug 2021Aug 2026Past support
ASA5506-FIPS-KITASA 5506-X FIPS KitAug 2021Aug 2026Past support
ASA5506-PWR-ACASA 5506-X Power AdaptorAug 2021Aug 2026Past support
ASA5506-RACK-MNTASA 5506-X Rackmount Kit SpareAug 2021Aug 2026Past support
ASA5506-SEC-PLASA 5506 Sec. Plus Lic. w/ HA, DMZ, VLAN trunk, more conns.Aug 2021Aug 2026Past support
ASA5506-SSDASA 5506-X SSDAug 2021Aug 2026Past support
ASA5506-WALL-MNTASA 5506-X Wal MountAug 2021Aug 2026Past support
ASA5506H-DIN-MNTASA 5506H-X DIN Rail Mount SpareAug 2021Aug 2026Past support
ASA5506H-PWR-ACASA 5506H-X Power AdaptorAug 2021Aug 2026Past support
ASA5506H-RACK-MNTASA 5506H-X Rackmount Kit SpareAug 2021Aug 2026Past support
ASA5506H-SEC-PLASA 5506H-X Sec. Plus LicenseAug 2021Aug 2026Past support
ASA5506H-SSDASA 5506H-X SSDAug 2021Aug 2026Past support
ASA5506H-WALL-MNTASA 5506H-X Wall Mount SpareAug 2021Aug 2026Past support
ASA5506HT-BASECisco ASA5506H Threat Defense Base LicenseAug 2021Aug 2026Past support
ASA5506T-BASECisco ASA5506 Threat Defense Base LicenseAug 2021Aug 2026Past support
ASA5506WT-BASECisco ASA5506W Threat Defense Base LicenseAug 2021Aug 2026Past support
Cisco EOL bulletin ↗5512-X / 5515-X (no Secure Boot) · verified Jul 2026
Cisco EOL bulletin ↗5525-X / 5545-X / 5555-X · verified Sep 2026
Cisco EOL bulletin ↗5508-X / 5516-X · verified Sep 2026
Cisco EOL bulletin ↗5506-X / 5506H-X · verified Sep 2026

Options from here

The Cisco ASA 5500-X Series Firewalls is past Cisco end of service life. These are the paths teams take from here:

Third-party maintenance

Keep it in production past the OEM cutoff with an independent maintainer.

Pre-stock spares

Buy spares now, while units still circulate on the secondary market.

Plan replacement

It is unsupported today. Set a migration timeline and budget.

Run to failure

Low-criticality role: document the risk, harden backups, retire on your terms.

Independent and informational. EOSL.ai sells no hardware and no maintenance, and lists no paid placements. Third-party maintenance keeps unsupported gear in production past the OEM cutoff; whether it fits depends on the role the asset plays.

ASA 5500-X Series Firewalls — questions

Is the Cisco ASA 5500-X Series Firewalls end of life?

Yes. Every tracked 5500-X Series Firewalls SKU group is past its last date of support.

What is the last date of support for the 5500-X Series Firewalls?

Last dates of support across 5500-X Series Firewalls SKU groups range from Aug 2022 to Aug 2026.

Where do these 5500-X Series Firewalls dates come from?

Every end-of-sale and end-of-service-life date on this page links to the official Cisco EOL bulletin it was taken from.

What is the replacement for the 5500-X Series Firewalls?

Cisco's end-of-life bulletins list Cisco Firepower 2100 Series and Cisco Firepower 1000 Series as the recommended migration path for the 5500-X Series Firewalls. Exact per-part-number replacements are in the linked bulletins.

On the same timetable

Embed this status on your wiki or README

A live badge that shows this model's support status and links here — it refreshes when the vendor date changes.

Cisco ASA 5500-X Series Firewalls EOL / EOSL status
<a href="https://eosl.ai/system/cisco-asa-5500x/"><img src="https://eosl.ai/badge/cisco-asa-5500x.svg" alt="Cisco ASA 5500-X Series Firewalls EOL / EOSL status"></a>
[![Cisco ASA 5500-X Series Firewalls EOL / EOSL status](https://eosl.ai/badge/cisco-asa-5500x.svg)](https://eosl.ai/system/cisco-asa-5500x/)