End-of-Sale and End-of-Life Announcement

Cisco Secure Firewall ASA 5508-X and ASA 5516-X

Last updated: 5/28/2024

Overview Migration options

End-of-life timeline

Table 1. End-of-life milestones and dates for the Cisco Secure Firewall ASA 5508-X and ASA 5516-X

MilestoneDefinitionDate
End-of-Life Announcement DateThe date the document that announces the end of sale and end of life of a product is distributed to the general public.February 1, 2021
End-of-Sale Date: HW, LicenseThe last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.August 2, 2021
Last Ship Date: HW, LicenseThe last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time.October 31, 2021
End of Routine Failure Analysis Date: HWThe last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect.August 2, 2022
End of New Service Attachment Date: HWFor equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.August 2, 2022
End of Signature Release Date: APP SWThe date after which there will be no more signature update release for Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions products going end of lifeAugust 31, 2026
End of Service Contract Renewal Date: HWThe last date to extend or renew a service contract for the product.October 28, 2025
Last Date of Support: HWThe last date to receive applicable service and support for the product as entitled by active service contracts or by warranty terms and conditions. After this date, all support services for the product are unavailable, and the product becomes obsolete.August 31, 2026

Product part numbers

Table 2. Product part numbers affected by this announcement

End-of-Sale Product Part NumberProduct DescriptionReplacement Product Part Number
ASA5508ASA 5508-X with FirePOWER services, 8GE, AC, DESSee migration options tab for detailed guidance about replacement.
ASA5508-BRACKET=ASA 5508-X Bracket SpareSee migration options tab for detailed guidance about replacement.
ASA5508-CTRL-LICCisco ASA5508 Control LicenseSee migration options tab for detailed guidance about replacement.
ASA5508-CTRL-LIC=Cisco ASA5508 Control LicenseSee migration options tab for detailed guidance about replacement.
ASA5508-FIPS-KIT=ASA 5508-X FIPS KItSee migration options tab for detailed guidance about replacement.
ASA5508-FTD-K9ASA 5508-X with Firepower Threat Defense, 8GE, ACSee migration options tab for detailed guidance about replacement.
ASA5508-K8ASA 5508-X with FirePOWER services, 8GE, AC, DESSee migration options tab for detailed guidance about replacement.
ASA5508-K9ASA 5508-X with FirePOWER services, 8GE, AC, 3DES/AESSee migration options tab for detailed guidance about replacement.
ASA5508-SEC-PLASA 5508-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + ConnsSee migration options tab for detailed guidance about replacement.
ASA5508-SSDASA 5508-X SSDSee migration options tab for detailed guidance about replacement.
ASA5508-SSD++=ASA 5508-X SSDSee migration options tab for detailed guidance about replacement.
ASA5508-SSD=ASA 5508-X SSDSee migration options tab for detailed guidance about replacement.
ASA5516ASA 5516-X with FirePOWER services, 8GE, AC, DESSee migration options tab for detailed guidance about replacement.
ASA5516-BRACKET=ASA 5516-X Bracket SpareSee migration options tab for detailed guidance about replacement.
ASA5516-CTRL-LICCisco ASA5516 Control LicenseSee migration options tab for detailed guidance about replacement.
ASA5516-CTRL-LIC=Cisco ASA5516 Control LicenseSee migration options tab for detailed guidance about replacement.
ASA5516-FIPS-KIT=ASA 5516-X FIPS KItSee migration options tab for detailed guidance about replacement.
ASA5516-FIPS-KITASA 5516-X FIPS KITThere is currently no replacement product available for this product.
ASA5516-FPWR-K8ASA 5516-X with FirePOWER services, 8GE, AC, DESSee migration options tab for detailed guidance about replacement.
ASA5516-FPWR-K9ASA 5516-X with FirePOWER services, 8GE, AC, 3DES/AESSee migration options tab for detailed guidance about replacement.
ASA5516-FTD-K9ASA 5516-X with Firepower Threat Defense, 8GE, ACSee migration options tab for detailed guidance about replacement.
ASA5516-SSDASA 5516-X SSDSee migration options tab for detailed guidance about replacement.
ASA5516-SSD++=ASA 5516-X SSDSee migration options tab for detailed guidance about replacement.
ASA5516-SSD=ASA 5516-X SSDSee migration options tab for detailed guidance about replacement.
ASA5516T-BASECisco ASA5516 Threat Defense Base LicenseSee migration options tab for detailed guidance about replacement.
ASA5500-SC-5ASA 5500 5 Security Contexts LicenseSee migration options tab for detailed guidance about replacement.
ASA5500-SC-5=ASA 5500 5 Security Contexts LicenseThere is currently no replacement product available for this product.
ASA5500-ENCR-K7ASA 5500 Strong Encryption License (3DES/AES) for NPE HWSee migration options tab for detailed guidance about replacement.
ASA5500-ENCR-K8ASA 5500 Base Encryption Level (DES)See migration options tab for detailed guidance about replacement.
ASA5500-ENCR-K9ASA 5500 Strong Encryption License (3DES/AES)See migration options tab for detailed guidance about replacement.
L-ASA5508-AMP-5YCisco ASA5508 FirePOWER AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-P-5YCisco Defense Orchestrator for ASA5508 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-TA-5YCisco ASA5508 FirePOWER IPS 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-TAC-5YCisco ASA5508 FirePOWER IPS and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-TAM-5YCisco ASA5508 FirePOWER IPS and AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-TAMC-5YCisco ASA5508 FirePOWER IPS, AMP and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508-URL-5YCisco ASA5508 FirePOWER URL Filtering 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-AMP-5YCisco ASA5508 Threat Defense Malware Protection 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-T-5YCisco ASA5508 Threat Defense Threat Protection 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-TC-5YCisco ASA5508 Threat Defense Threat and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-TM-5YCisco ASA5508 Threat Defense Threat and Malware 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-TMC-5YCisco ASA5508 Threat Defense Threat, Malware and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5508T-URL-5YCisco ASA5508 Threat Defense URL Filtering 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-AMP-5YCisco ASA5516 FirePOWER AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-P-5YCisco Defense Orchestrator for ASA5516 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-TA-5YCisco ASA5516 FirePOWER IPS 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-TAC-5YCisco ASA5516 FirePOWER IPS and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-TAM-5YCisco ASA5516 FirePOWER IPS and AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-TAMC-5YCisco ASA5516 FirePOWER IPS, AMP and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516-URL-5YCisco ASA5516 FirePOWER URL Filtering 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-AMP-5YCisco ASA5516 Threat Defense Malware Protection 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-T-5YCisco ASA5516 Threat Defense Threat Protection 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-TC-5YCisco ASA5516 Threat Defense Threat and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-TM-5YCisco ASA5516 Threat Defense Threat and Malware 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-TMC-5YCisco ASA5516 Threat Defense Threat, Malware and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-ASA5516T-URL-5YCisco ASA5516 Threat Defense URL Filtering 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-P-5YSVP Cisco Defense Orchestrator for ASA5508 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-PN-5YSVP Cisco Defense Orchestrator for ASA5508 with FPWR 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-TA-5YSVP Cisco ASA5508 FirePOWER IPS 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-TAC-5YSVP Cisco ASA5508 FirePOWER IPS and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-TAM-5YSVP Cisco ASA5508 FirePOWER IPS and AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5508-TAMC5YSVP Cisco ASA5508 FirePOWER IPS, AMP and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-P-5YSVP Cisco Defense Orchestrator for ASA5516 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-PN-5YSVP Cisco Defense Orchestrator for ASA5516 with FPWR 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-TA-5YSVP Cisco ASA5516 FirePOWER IPS 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-TAC-5YSVP Cisco ASA5516 FirePOWER IPS and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-TAM-5YSVP Cisco ASA5516 FirePOWER IPS and AMP 5-year subscriptionSee migration options tab for detailed guidance about replacement.
L-S-ASA5516-TAMC5YSVP Cisco ASA5516 FirePOWER IPS, AMP and URL 5-year subscriptionSee migration options tab for detailed guidance about replacement.
ASA5508-FPWR-BUNASA 5508-X with FirePOWER Services. Chassis and Subs. BundleSee migration options tab for detailed guidance about replacement.
ASA5508-FTD-BUNASA 5508-X Firepower Threat Defense Chassis and Subs. BundleSee migration options tab for detailed guidance about replacement.
ASA5508-FTD-HA-BUNCisco ASA5508X Firepower Threat Defense Chassis and Subs. BundleSee migration options tab for detailed guidance about replacement.
ASA5516-FTD-HA-BUNCisco ASA5516X Firepower Threat Defense Chassis and Subs. BundleSee migration options tab for detailed guidance about replacement.
ASA5516-FTD-BUNASA 5516-X Firepower Threat Defense Chassis and Subs. BundleSee migration options tab for detailed guidance about replacement.
ASA5516-FPWR-BUNASA 5516-X with FirePOWER Services Chassis, Subs, FireSight ManagerSee migration options tab for detailed guidance about replacement.

Cisco Secure Firewall demo

See, Try, or Buy a Firewall

Firewalls designed to protect your security foundation with a range of benefits from network security, application visibility and control, scalability, simplified management, flexible deployment, regulatory compliance, and comprehensive support.

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.