Cisco's last date of support for the ASA 5508-X and ASA 5516-X was August 31, 2026. End of sale had been August 2, 2021. From that date Cisco takes no new support cases for them and ships no new software for them.
A firewall is not an access switch. It faces the internet, so the end of software fixes weighs more on it than on a switch in a closet. That is the honest starting point for anyone still running one, and for anyone buying one for a lab, a spare or a like-for-like swap.
The dates
| Model | Announced | End of sale | End of support |
|---|---|---|---|
| Cisco ASA 5508-X / 5516-X | 2021-02-01 | 2021-08-02 | 2026-08-31 |
| Cisco ASA 5585-X with IPS SSP-10 | 2014-10-26 | 2015-04-26 | 2020-04-30 |
| Cisco ASA 5510 | 2013-03-18 | 2013-09-16 | 2018-09-30 |
Source: Cisco notice for the Cisco ASA 5508-X / 5516-X; Cisco notice for the Cisco ASA 5585-X with IPS SSP-10; Cisco notice for the Cisco ASA 5510. Cisco end-of-life notices c51-744798 (ASA 5508-X, 5516-X) and c51-744797 (ASA 5506-X). End of sale was 2021-08-02; Cisco's last date of support was 2026-08-31. Cisco end-of-life notice c51-733186 (Cisco Intrusion Prevention System) lists the ASA5585-S10P10-K9. Hardware support ended 2020-04-30; IPS software support ended 2018-04-30.
What the dates mean
Cisco runs two clocks on every product. End of sale is the last day Cisco takes an order for it. The last date of support is the last day Cisco's support center takes a case and the last day a Cisco service contract covers the hardware. After that date the hardware keeps forwarding packets and the owner carries the risk: no new software fixes and no replacement from the maker.
Older ASA models passed the same point years ago: the ASA 5510 on September 30, 2018 and the ASA 5585-X with IPS SSP-10 on April 30, 2020.
The replacement the maker names
Cisco's notice names the Cisco Firepower 1000 series as the replacement for the ASA 5508-X and 5516-X.
What we list
The Cisco ASA firewalls page holds every listing in the family. Part numbers listed today:
What owners do next
- Plan the replacement at the internet edge. A firewall past its support date gets no new security fixes. Most owners move the edge to a supported platform and keep the ASA for lab work, internal roles or as a cold spare during the cutover. See the Cisco ASA firewalls listings.
- Buy more of what you already run. Matching hardware keeps one software image, one set of optics and one spares pool across the site.
- Sell what you retire. When the replacement goes in, send us the list and we will quote the pull.
Every unit we ship is tested in-house first and carries our warranty. If the part number you need is not listed, request a quote and we will check the warehouse.
