eosl.ai ›
home › Cisco › 5500-X Series Firewalls

Cisco ASA 5500-X Series Firewalls — End-of-Life & EOSL Dates

VARIES BY PART NUMBER40 of 60 tracked part numbers are past support. The other 20 run to August 2026.

Adaptive Security Appliance firewalls. Support dates split by model. The 5512-X/5515-X lack Secure Boot and were targeted in the ArcaneDoor attack campaign against out-of-support units.

Cisco ASA 5500-X Series Firewalls has mixed lifecycle status. Some SKU groups are already past Cisco end of service while others run until Aug 2026. Confirm the exact part number before any support or refresh decision. For past-EOSL units, weigh third-party maintenance, spares, replacement, or a documented run-to-failure. Cisco’s named migration path: Cisco Firepower 2100 Series / Cisco Firepower 1000 Series.

Available

Sep 2012

End of sale

Aug 2017 – Aug 2021

Last date of support

Aug 2022 – Aug 2026

Part numbers

60

Cisco EOL bulletin ↗5512-X / 5515-X (no Secure Boot) · verified Jul 2026
Cisco EOL bulletin ↗5525-X / 5545-X / 5555-X · verified Jun 2026
Cisco EOL bulletin ↗5508-X / 5516-X · verified Jun 2026
Cisco EOL bulletin ↗5506-X / 5506H-X · verified Jun 2026
Cisco names Cisco Firepower 2100 Series / Cisco Firepower 1000 Series as the migration pathper the linked bulletin · see its own dates
Check your part numbers in bulk Add to calendar

40

of 60 part numbers are past support

Support Runway Score13/100 · Little or no runway
Why this score
  • Past end of service life — 48 months ago
  • Vendor-published date, source-linked
  • Mixed status across SKU groups — some past EOSL, some still supported
  • Vendor-named replacement / migration path available
  • Category: firewall / security appliance

Support-lifecycle timing and source confidence only. Higher means more runway. It is not a risk, safety or compliance rating. How it is calculated

Figure 1. The exact part number decides. 20 remain supported, to Aug 2026. Confirm yours in the table below before any support or refresh decision.

Past end of support and listed in the CISA Known Exploited Vulnerabilities catalog

11 catalogued vulnerabilities are associated with this product line, 11 of them linked to known ransomware campaigns. CISA lists these as actively exploited. This product is also past its last date of support, so the vendor no longer issues fixes for it. Past support on its own is a planning matter; both together is an audit finding, and for US federal agencies BOD 22-01 sets a remediation deadline.

CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Possible match · ransomware · added 2024-11-12 · federal due 2024-12-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability Possible match · ransomware · added 2024-10-24 · federal due 2024-11-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability Possible match · ransomware · added 2024-04-24 · federal due 2024-05-01 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability Possible match · ransomware · added 2024-04-24 · federal due 2024-05-01 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3259Cisco ASA and FTD Information Disclosure Vulnerability Possible match · ransomware · added 2024-02-15 · federal due 2024-03-07 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Possible match · ransomware · added 2023-09-13 · federal due 2023-10-04 Matched: CISA names "Adaptive Security Appliance" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2016-6366Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Possible match · ransomware · added 2022-05-24 · federal due 2022-06-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Possible match · ransomware · added 2022-05-24 · federal due 2022-06-14 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3452Cisco ASA and FTD Read-Only Path Traversal Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2020-3580Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗
CVE-2018-0296Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Possible match · ransomware · added 2021-11-03 · federal due 2022-05-03 Matched: CISA names "Adaptive Security Appliance (ASA)" with no specific model; this is one of 1 tracked products in that line · vendor advisory ↗

CISA names product lines and software rather than part numbers, so each row states how it was matched. Confirm against the vendor advisory before acting: this augments vendor data, it does not replace it.

CISA Known Exploited Vulnerabilities catalog · catalogue 2026.08.18 · every tracked product past support and in KEV

Documented real-world exploitation of out-of-support units

Public security reporting documents active exploitation affecting this product line. It is summarised here because units past their last date of support no longer receive vendor fixes. This describes the published campaigns, not the state of any specific device.

ArcaneDoor espionage campaign (2024) CVE-2024-20353 · CVE-2024-20359

Cisco Talos documented a state-sponsored campaign (UAT4356) implanting the Line Runner and Line Dancer backdoors on Cisco ASA devices, exploiting these two vulnerabilities. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog. ASA units past their last date of support no longer receive the fixed software.

Sources: Cisco Talos — ArcaneDoor report ↗ · CISA alert (2024-04-24) ↗

CISA Emergency Directive ED 25-03 (2025) CVE-2025-20333 · CVE-2025-20362

In September 2025 CISA ordered US federal agencies to identify and mitigate potentially compromised Cisco ASA and Firepower devices after active exploitation of these chained vulnerabilities, which allow a remote unauthenticated attacker to take full control of unpatched devices. End-of-support ASA hardware cannot receive the fixed releases and the directive's guidance is to permanently disconnect such devices.

Sources: CISA ED 25-03 ↗ · CISA alert (2025-09-25) ↗

Part numbers in this family

Dates vary across 4 groups in this family, so every row carries its own. Find your exact part before you plan.

Part numberDescriptionEnd of saleLast supportStatus
ASA5512-K7Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-DC-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-FPWR-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-FPWR-BUNCisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-ME-K8Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5512-ME-K9Cisco ASA 5512-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K7Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-DC-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-FPWR-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-ME-K8Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5515-ME-K9Cisco ASA 5515-X adaptive security applianceAug 2017Aug 2022Past support
ASA5525-K7Sep 2020Sep 2025Past support
ASA5525-K8Sep 2020Sep 2025Past support
ASA5525-K9Sep 2020Sep 2025Past support
ASA5525-CU-K9Sep 2020Sep 2025Past support
ASA5525-DCSep 2020Sep 2025Past support
ASA5525-DC-K8Sep 2020Sep 2025Past support
ASA5525-FPWR-K8Sep 2020Sep 2025Past support
ASA5525-FPWR-K9Sep 2020Sep 2025Past support
ASA5525-FTD-K9Sep 2020Sep 2025Past support
ASA5545-K7Sep 2020Sep 2025Past support
ASA5545-K8Sep 2020Sep 2025Past support
ASA5545-K9Sep 2020Sep 2025Past support
ASA5545-CU-2AC-K9Sep 2020Sep 2025Past support
ASA5545-DC-K8Sep 2020Sep 2025Past support
ASA5545-FPWR-K8Sep 2020Sep 2025Past support
ASA5545-FPWR-K9Sep 2020Sep 2025Past support
ASA5545-FTD-K9Sep 2020Sep 2025Past support
ASA5555-K7Sep 2020Sep 2025Past support
ASA5555-K8Sep 2020Sep 2025Past support
ASA5555-K9Sep 2020Sep 2025Past support
ASA5555-CU-2AC-K9Sep 2020Sep 2025Past support
ASA5555-DC-K8Sep 2020Sep 2025Past support
ASA5555-FPWR-K8Sep 2020Sep 2025Past support
ASA5555-FPWR-K9Sep 2020Sep 2025Past support
ASA5555-FTD-K9Sep 2020Sep 2025Past support
ASA5508-K8Aug 2021Aug 2026Ending soon
ASA5508-K9Aug 2021Aug 2026Ending soon
ASA5508-FTD-K9Aug 2021Aug 2026Ending soon
ASA5508-FPWR-BUNAug 2021Aug 2026Ending soon
ASA5508-FTD-BUNAug 2021Aug 2026Ending soon
ASA5508-FTD-HA-BUNAug 2021Aug 2026Ending soon
ASA5516-FPWR-K8Aug 2021Aug 2026Ending soon
ASA5516-FPWR-K9Aug 2021Aug 2026Ending soon
ASA5516-FTD-K9Aug 2021Aug 2026Ending soon
ASA5516-FTD-BUNAug 2021Aug 2026Ending soon
ASA5516-FPWR-BUNAug 2021Aug 2026Ending soon
ASA5516-FTD-HA-BUNAug 2021Aug 2026Ending soon
ASA5506-K8Aug 2021Aug 2026Ending soon
ASA5506-K9Aug 2021Aug 2026Ending soon
ASA5506-SEC-BUN-K8Aug 2021Aug 2026Ending soon
ASA5506-SEC-BUN-K9Aug 2021Aug 2026Ending soon
ASA5506-FPWR-BUNAug 2021Aug 2026Ending soon
ASA5506H-SP-BUN-K8Aug 2021Aug 2026Ending soon
ASA5506H-SP-BUN-K9Aug 2021Aug 2026Ending soon
ASA5506H-FPWR-BUNAug 2021Aug 2026Ending soon
Cisco EOL bulletin ↗5512-X / 5515-X (no Secure Boot) · verified Jul 2026
Cisco EOL bulletin ↗5525-X / 5545-X / 5555-X · verified Jun 2026
Cisco EOL bulletin ↗5508-X / 5516-X · verified Jun 2026
Cisco EOL bulletin ↗5506-X / 5506H-X · verified Jun 2026

Options from here

40 Cisco ASA 5500-X Series Firewalls part numbers are past Cisco end of service while 20 remain supported (to Aug 2026). For the past-EOSL units, these are the usual paths:

Third-party maintenance

Keep it in production past the OEM cutoff with an independent maintainer.

Pre-stock spares

Buy spares now, while units still circulate on the secondary market.

Plan replacement

It is unsupported today. Set a migration timeline and budget.

Run to failure

Low-criticality role: document the risk, harden backups, retire on your terms.

Check your exact part numbers Weigh your support options

Independent and informational. EOSL.ai sells no hardware and no maintenance, and lists no paid placements. Third-party maintenance keeps unsupported gear in production past the OEM cutoff; whether it fits depends on the role the asset plays.

ASA 5500-X Series Firewalls — questions

Is the Cisco ASA 5500-X Series Firewalls end of life?

Partly. Some 5500-X Series Firewalls SKU groups are past end of service life while others are still supported. See the dates by SKU group below.

What is the last date of support for the 5500-X Series Firewalls?

Last dates of support across 5500-X Series Firewalls SKU groups range from Aug 2022 to Aug 2026.

Where do these 5500-X Series Firewalls dates come from?

Every end-of-sale and end-of-service-life date on this page links to the official Cisco EOL bulletin it was taken from.

What is the replacement for the 5500-X Series Firewalls?

Cisco's end-of-life bulletins list Cisco Firepower 2100 Series and Cisco Firepower 1000 Series as the recommended migration path for the 5500-X Series Firewalls. Exact per-part-number replacements are in the linked bulletins.

On the same timetable

Related Everything reaching EOSL in 2022 (184)Everything reaching EOSL in 2025 (143)Everything reaching EOSL in 2026 (146)Cisco ending soon (18)Cisco already unsupported (74)
Embed this status on your wiki or README

A live badge that shows this model's support status and links here — it refreshes when the vendor date changes.

Cisco ASA 5500-X Series Firewalls EOL / EOSL status
<a href="https://eosl.ai/system/cisco-asa-5500x/"><img src="https://eosl.ai/badge/cisco-asa-5500x.svg" alt="Cisco ASA 5500-X Series Firewalls EOL / EOSL status"></a>
[![Cisco ASA 5500-X Series Firewalls EOL / EOSL status](https://eosl.ai/badge/cisco-asa-5500x.svg)](https://eosl.ai/system/cisco-asa-5500x/)