End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance
Available Languages
EOL9154—Amended
Cisco announces the end-of-sale and end-of life dates for the Cisco ASA 5520 Adaptive Security Appliance. The last day to order the affected product(s) is September 16, 2013. Customers with active service contracts will continue to receive support from the Cisco Technical Assistance Center (TAC) as shown in Table 1 of the EoL bulletin. Table 1 describes the end-of-life milestones, definitions, and dates for the affected product(s). Table 2 lists the product part numbers affected by this announcement. For customers with active and paid service and support contracts, support will be available under the terms and conditions of customers' service contract.
This end-of-sale notice is part of a broader end-of-sale announcement for the Cisco ASA 5500 Series appliances that covers ASA 5510, ASA 5520, ASA 5540, and ASA 5550, including hardware accessories. Please refer to the respective end-of-sale notices for more detail. Software licenses on the Cisco ASA 5520 have not reached their end-of-sale date. The Cisco ASA 9.1 is the last software release that will be supported on ASA 5540 and other ASA 5500 appliances that have reached their end-of-sale date. Customers are encouraged to migrate to the newer ASA 5500-X Series of next-generation firewalls (NGFW), which includes the ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X.
Table 1. End-of-Life Milestones and Dates for the Cisco ASA 5520 Adaptive Security Appliance
| Milestone | Definition | Date |
| End-of-Life Announcement Date | The date the document that announces the end of sale and end of life of a product is distributed to the general public. | March 18, 2013 |
| End-of-Sale Date | The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date. | September 16, 2013 |
| Last Ship Date: | The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time. | December 15, 2013 |
| End of Routine Failure Analysis Date: | The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect. | September 16, 2014 |
| End of New Service Attachment Date: | For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract. | September 16, 2014 |
| End of Service Contract Renewal Date: | The last date to extend or renew a service contract for the product. | December 12, 2017 |
| Last Date of Support: | The last date to receive applicable service and support for the product as entitled by active service contracts or by warranty terms and conditions. After this date, all support services for the product are unavailable, and the product becomes obsolete. | September 30, 2018 |
Note that the ASA 5500 appliances (including the ASA 5520) do NOT support NGFW services (AVC and WSE), whereas all ASA 5500-X appliances (including the ASA 5545-X) have been designed ground-up to run multiple services, including the NGFW services, without sacrificing performance.
Table 2. Product Part Numbers Affected by This Announcement
| End-of-Sale Product | Product Description | Replacement Product Part Number | Replacement Product Description | Additional Information |
| ASA5520-AIP-NFR-K9 | ASA 5520 NFR Appl w/ AIP-10, SW, HA, 4GE+1FE, 3DES | ASA5525-IPS-K9 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, 3DES/AES | — |
| ASA5520-AIP10-K8 | ASA 5520 Appliance w/ AIP-SSM-10, SW, HA, 4GE+1FE, DES | ASA5525-IPS-K8 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, DES | — |
| ASA5520-AIP10-K9 | ASA 5520 Appliance w/ AIP-SSM-10, SW, HA, 4GE+1FE, 3DES/AES | ASA5525-IPS-K9 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, 3DES/AES | — |
| ASA5520-AIP20-K8 | ASA 5520 Appliance w/ AIP-SSM-20, SW, HA, 4GE+1FE, DES | ASA5525-IPS-K8 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, DES | — |
| ASA5520-AIP20-K9 | ASA 5520 Appliance w/ AIP-SSM-20, SW, HA, 4GE+1FE, 3DES/AES | ASA5525-IPS-K9 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, 3DES/AES | — |
| ASA5520-AIP40-K8 | ASA 5520 Appliance w/ AIP-SSM-40, SW, HA, 4GE+1FE, DES | ASA5525-IPS-K8 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, DES | — |
| ASA5520-AIP40-K9 | ASA 5520 Appliance w/ AIP-SSM-40, SW, HA, 4GE+1FE, 3DES/AES | ASA5525-IPS-K9 | ASA 5525-X with IPS, SW, 8GE Data, 1GE Mgmt, AC, 3DES/AES | — |
| ASA5520-BUN-K9 | ASA 5520 Appliance with SW, HA, 4GE+1FE, 3DES/AES | ASA5525-SSD120-K9 | NGFW ASA 5525-X w/ SW,8GE Data,1GE Mgmt,AC,3DES/AES,SSD 120G | — |
| ASA5520-CSC-NFR-K9 | ASA 5520 NFR Appl w/ CSC20,SW,500 Usr AV/Spy, 1 YR Subscript | See Product Migration Options section for details. | ASA 5525-X with Cloud Web Security (formerly known as ScanSafe) |
|
| ASA5520-CSC-PRM-K9 | ASA 5520 w/CSC20, SW, 250 Usr AV/URL/Spam/Spy, 1YR Subscript | See Product Migration Options section for details. | ASA 5525-X with Cloud Web Security (formerly known as ScanSafe) |
|
| ASA5520-CSC10-K9 | ASA 5520 Appl w/ CSC10, SW, 50 Usr AV/Spy, 1 YR Subscript | See Product Migration Options section for details. | ASA 5525-X with Cloud Web Security (formerly known as ScanSafe) |
|
| ASA5520-CSC20-K8 | ASA 5520 Appl w/ CSC20, SW,500 Usr AV/Spy,1 YR Subscript,DES | See Product Migration Options section for details. | ASA 5525-X with Cloud Web Security (formerly known as ScanSafe) |
|
| ASA5520-CSC20-K9 | ASA 5520 Appl w/ CSC20, SW, 500 Usr AV/Spy, 1 YR Subscript | See Product Migration Options section for details. | ASA 5525-X with Cloud Web Security (formerly known as ScanSafe) |
|
| ASA5520-DC-K8 | ASA 5520 Appliance with DC power, SW, HA, 4GE+1FE, DES | ASA5525-DC-K8 | ASA 5525-X with SW, 8GE Data, 1GE Mgmt, DC, DES | — |
| ASA5520-K8 | ASA 5520 Appliance with SW, HA, 4GE+1FE, DES | ASA5525-SSD120-K8 | NGFW ASA 5525-X with SW, 8GE Data, 1GE Mgmt, AC, DES, SSD 120G | — |
| ASA5520-NFR-K8 | ASA 5520 NFR Appliance with SW, HA, 4GE+1FE, DES | ASA5525-SSD120-K8 | NGFW ASA 5525-X with SW, 8GE Data, 1GE Mgmt, AC, DES, SSD 120G | — |
| ASA5520-SSL500-K9 | ASA 5520 VPN Edition w/ 500 SSL User License, HA, 3DES/AES | ASA5525VPN-PM500K9 | ASA 5525-X w/500 AnyConnect Premium and Mobile | — |
| ASA5520-UC-BUN-K8 | ASA 5520 UC Bundle With 1000 UC Proxy Sessions, DES | See Product Migration Options section for details. | ASA 5525-X with ASA-UC-1000 license |
|
| ASA5520-UC-BUN-K9 | ASA 5520 UC Bundle With 1000 UC Proxy Sessions, 3DES/AES | ASA5525-SSD120-K9 | NGFW ASA 5525-X w/ SW,8GE Data,1GE Mgmt,AC,3DES/AES,SSD 120G | — |
| ASA5520-UC-BUN-K9 | ASA 5520 UC Bundle With 1000 UC Proxy Sessions, 3DES/AES | See Product Migration Options section for details. | ASA 5525-X with ASA-UC-1000 license |
|
Product Migration Options
Customers are encouraged to migrate to the newer Cisco ASA 5500-X Series, specifically the Cisco ASA 5525-X. The Cisco ASA 5525-X offers increased throughput, better interface density, and the ability to run services like IPS, AVC (Application Visibility and Control), WSE (Web Security Essentials), etc., without requiring a separate hardware module. Additionally, the ASA 5525-X includes a hardware chip to speed up IPS signature execution (for both default and custom signatures). Refer to the table below for a detailed comparison between the ASA 5520 and ASA 5525-X. Customers can also upgrade to the Cisco ASA 5545-X, which provides the option of dual power supplies in addition to better performance and scaling.
Table 3. Product Comparisons
| Feature | Cisco ASA 5520 Adaptive Security Appliance | Cisco ASA 5525-X Adaptive Security Appliance |
| Next-Generation Firewall | No | Yes |
| Application Visibility and Control Service | No | Yes |
| Web Security Service | No | Yes |
| IPS Service | Yes (Requires separate Hardware module) | Yes (Does not require separate hardware module) |
| Content Security Card Module | Yes | Similar functionality available through Cloud Web Security (formerly known as ScanSafe) |
| Firewall Throughput (Max) | 450 Mbps | 2 Gbps |
| IPS Throughput (Max) | 450 Mbps | 600 Mbps |
| VPN Throughput (Max) | 225 Mbps | 300 Mbps |
| Connections (Max) | 280,000 | 500,000 |
| Connections Per Second | 12,000 | 20,000 |
| Integrated I/O | 4 GE Copper + 1 FE | 8 GE Copper |
| Expansion I/O | 4-port GE Cu or 4-port GE SFP | 6-port GE Copper or 6-port GE SFP |
| CPU | Single Core | Multiple Cores |
| Memory | 2 GB | 8 GB |
| IPS Accelerator hardware | No. All signatures run on IPS Security Module CPU. | In-built hardware accelerator for both default and custom signatures |
| Hardware support for 2048-bit certificates | No | Yes |
Customers may be able to use the Cisco Technology Migration Program (TMP) where applicable to trade-in eligible products and receive credit toward the purchase of new Cisco equipment. For more information about Cisco TMP, customers should work with their Cisco Partner or Cisco account team. Cisco Partners can find additional TMP information on Partner Central at http://www.cisco.com/web/partners/incentives_and_promotions/tmp.html
Customers may be able to continue to purchase the Cisco ASA 5520 Adaptive Security Appliance through the Cisco Certified Refurbished Equipment program. Refurbished units may be available in limited supply for sale in certain countries on a first-come, first-served basis until the Last Date of Support has been reached. For information about the Cisco Certified Refurbished Equipment program, go to: www.cisco.com/go/eos
Service prices for Cisco products are subject to change after the product End of Sale date.
The Cisco Takeback and Recycle program helps businesses dispose properly of surplus products that have reached their end of useful life. The program is open to all business users of Cisco equipment and its associated brands and subsidiaries. For more information, go to: http://www.cisco.com/web/about/ac227/ac228/ac231/about_cisco_takeback_recycling.html
For More Information
For more information about the Cisco ASA 5525-X Adaptive Security Appliance, visit http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf, or contact your local account representative.
For more information about the Cisco End-of-Life Policy, go to:
http://www.cisco.com/en/US/products/products_end-of-life_policy.html
For more information about the Cisco Product Warranties, go to:
http://www.cisco.com/en/US/products/prod_warranties_listing.html
To subscribe to receive end-of-life/end-of-sale information, go to:
http://www.cisco.com/cisco/support/notifications.html
Subscribe for RSS Notifications for End-of-Life and End-of-Sale Notices
To subscribe to the End-of-Life and End-of-Sale RSS Feed, insert the following URL into your RSS application: http://www.cisco.com/web/feeds/products/end_of_life_rss.xml
Any authorized translation issued by Cisco Systems or affiliates of this end-of-life Product Bulletin is intended to help customers understand the content described in the English version. This translation is the result of a commercially reasonable effort; however, if there are discrepancies between the English version and the translated document, please refer to the English version, which is considered authoritative.
Feedback