Cisco ASA 5500-X End of Life: Dates by Model

ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) support dates

Every row names its basis. A third-party tracker date is not the vendor’s own, and “not published” means exactly that.
Milestone	Date	Basis	Source
End-of-Sale Date: HW, License (ASA 5506-X / 5506H-X, ASA-software PIDs, EOL13763)	2 August 2021	Vendor-publishedBulletin EOL13763 (ASA5506 Series Security Appliance with ASA software), announced 1 Feb 2021. Table 2 covers the ASA5506 and ASA5506H hardware, licences and accessories. It also lists two 5506W-X licence PIDs (ASA5506W-CTRL-LIC, ASA5506WT-BASE) but no 5506W-X hardware PID.	End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software (EOL13763)
End of Service Contract Renewal Date: HW (ASA 5506-X / 5506H-X, ASA-software PIDs, EOL13763)	28 October 2025	Vendor-published	Cisco EOL13763
Last Date of Support: HW (ASA 5506-X / 5506H-X, ASA-software PIDs, EOL13763)	31 August 2026	Vendor-publishedPassed. EOL13763 has no End of SW Maintenance or End of Vulnerability/Security Support row.	Cisco EOL13763
End-of-Sale Date: HW (ASA 5506-X / 5506H-X, FTD-software PIDs, EOL12452)	30 July 2019	Vendor-publishedEOL12452 (Amended, updated 8 May 2019), announced 30 Apr 2019. It covers only the 5506 appliances and licences with FTD software: ASA5506-FTD-BUN, ASA5506-FTD-HA-BUN, ASA5506-FTD-K9, ASA5506H-FTD-BUN and ASA5506H-FTD-K9. Cisco has retired the live bulletin URL, which now redirects to the series support page, so this cites a Wayback Machine snapshot dated 8 Apr 2024.	End-of-Sale and End-of-Life Announcement for the Cisco 5506 appliances and licenses with FTD software (EOL12452), archived copy
End of Vulnerability/Security Support: HW (ASA 5506-X / 5506H-X, FTD-software PIDs, EOL12452)	30 July 2022	Vendor-publishedThe same bulletin gives End of SW Maintenance Releases as 30 Jul 2020 and End of Service Contract Renewal as 28 Oct 2023.	Cisco EOL12452 (archived copy)
Last Date of Support: HW (ASA 5506-X / 5506H-X, FTD-software PIDs, EOL12452)	31 July 2024	Vendor-publishedPassed. This is earlier than the 31 Aug 2026 date for the ASA-software PIDs under EOL13763, so check the PID's software suffix.	Cisco EOL12452 (archived copy)
End-of-Sale Date: HW, License (ASA 5506W-X WiFi hardware, EOL12632)	30 September 2018	Vendor-publishedThe 5506W-X hardware has its own bulletin, EOL12632, announced 31 Aug 2018.	End-of-Sale and End-of-Life Announcement for the Cisco ASA5506W-X WiFi Security Appliances (EOL12632)
End of Vulnerability/Security Support: HW (ASA 5506W-X WiFi hardware, EOL12632)	30 September 2021	Vendor-published	Cisco EOL12632
Last Date of Support: HW (ASA 5506W-X WiFi hardware, EOL12632)	30 September 2023	Vendor-publishedConflict: Cisco's Threat Defense Compatibility Guide groups the 5506-X, 5506H-X and 5506W-X in one row with end of support 31 Aug 2026, linked to EOL13763. EOL13763 lists only 5506W-X licence PIDs. The hardware bulletin's date is shown here. Both dates have passed.	Cisco EOL12632
End-of-Sale Date: HW, License (ASA 5508-X / 5516-X, EOL13762)	2 August 2021	Vendor-publishedBulletin EOL13762, announced 1 Feb 2021 (PDF printed 12/23). It applies to the ASA5508 and ASA5516 with ASA Software, ASA with Firepower Services, and Firepower Threat Defense.	End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions (EOL13762)
End of Service Contract Renewal Date: HW (ASA 5508-X / 5516-X, EOL13762)	28 October 2025	Vendor-published	Cisco EOL13762
End of Signature Release Date: APP SW (ASA 5508-X / 5516-X and 5-year subscriptions, EOL13762)	31 August 2026	Vendor-published	Cisco EOL13762
Last Date of Support: HW (ASA 5508-X / 5516-X, EOL13762)	31 August 2026	Vendor-publishedPassed. EOL13762 has no End of SW Maintenance or End of Vulnerability/Security Support row.	Cisco EOL13762
End-of-Sale Date: HW, License (ASA 5512-X / 5515-X, EOL11414)	25 August 2017	Vendor-publishedBulletin EOL11414, announced 24 Feb 2017.	End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X (EOL11414)
Last Date of Support: HW (ASA 5512-X / 5515-X, EOL11414)	31 August 2022	Vendor-publishedEnd of Signature Release (License) is the same date, 31 Aug 2022.	Cisco EOL11414
End-of-Sale Date: HW, License (ASA 5525-X / 5545-X / 5555-X, EOL13130)	4 September 2020	Vendor-publishedBulletin EOL13130 (Amended), announced 6 Mar 2020.	End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions (EOL13130)
End of SW Maintenance Releases Date: HW (ASA 5525-X / 5545-X / 5555-X, EOL13130)	4 September 2021	Vendor-published	Cisco EOL13130
End of Signature Release Date (ASA 5525-X / 5545-X / 5555-X, EOL13130)	30 September 2025	Vendor-published	Cisco EOL13130
Last Date of Support: HW (ASA 5525-X / 5545-X / 5555-X, EOL13130)	30 September 2025	Vendor-publishedCisco's 'ASA 5500-X Series Firewalls' support page also shows 'End of Support' with End-of-Support Date 30-SEP-2025.	Cisco EOL13130
End-of-Sale Date: HW, License (ASA 5585-X, EOL12148)	1 June 2018	Vendor-publishedBulletin EOL12148, announced 1 Dec 2017. It covers the whole 5585-X family: SSP-10/20/40/60 chassis and SSPs, network modules, power supplies, fans and kits.	End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X Adaptive Security Appliance (EOL12148)
Last Date of Support: HW (ASA 5585-X, EOL12148)	31 May 2023	Vendor-published	Cisco EOL12148

Where the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) stands today

The 5512-X and 5515-X went first, on 31 August 2022 under EOL11414, and the 5585-X followed on 31 May 2023 under EOL12148. The 5506W-X WiFi hardware reached its date on 30 September 2023 under its own bulletin, EOL12632, and the 5525-X, 5545-X and 5555-X reached theirs on 30 September 2025 under EOL13130. The 5508-X and 5516-X (EOL13762) and the ASA-software 5506-X and 5506H-X PIDs (EOL13763) closed the sequence on 31 August 2026. No 5500-X model can now get Cisco TAC, RMA or software fixes under a Cisco contract.

For a 5506-X or 5506H-X, the PID decides the date. The FTD-software PIDs (ASA5506-FTD-K9, ASA5506-FTD-BUN, ASA5506-FTD-HA-BUN, ASA5506H-FTD-K9 and ASA5506H-FTD-BUN) sit under EOL12452 and reached their Last Date of Support on 31 July 2024 (Cisco has retired its live URL; a Wayback Machine copy dated 8 April 2024 holds the dates). To place any unit, read the PID on its label, for example ASA5508-K9 or ASA5585-S20-K9, and match it in Table 2 of the relevant bulletin. Cisco's Threat Defense Compatibility Guide gathers most models in one table but has no 5585-X row, and it groups the 5506W-X with the 5506-X and 5506H-X at an end-of-support date of 31 August 2026, against 30 September 2023 in the 5506W-X hardware bulletin; both dates have passed.

ASA 5500-X (5506-X / 5508-X / 5516-X and siblings): lifecycle on one axis

Dated milestones are placed only where a source gives the date; Blue = vendor-published, amber = third-party tracker, violet = derived from a vendor policy. Checked 8 October 2026.

Finding the date for your own unit

Cisco's dates apply model-wide, by PID, not per serial. Read the PID on the unit's label (for example ASA5508-K9, ASA5506-FTD-K9, ASA5506H-SP-BUN-K9, ASA5545-K9 or ASA5585-S20-K9) and look it up in Table 2 of the matching bulletin: EOL13763 (5506-X/5506H-X with ASA software), EOL12452 (5506-X/5506H-X with FTD software; Cisco has retired the live URL, so use the archived copy at web.archive.org), EOL12632 (5506W-X hardware), EOL13762 (5508-X/5516-X), EOL11414 (5512-X/5515-X), EOL13130 (5525-X/5545-X/5555-X) or EOL12148 (5585-X). The hardware end-of-life table in Cisco's Threat Defense Compatibility Guide lists most models in one place, but not the 5585-X. Contract coverage for a specific unit is per serial: Cisco's Device Coverage Checker (https://cway.cisco.com/sncheck/) checks service contract coverage by serial number and needs a Cisco account sign-in.

What still works after Cisco support ends

Each model now stops at a final software release. Cisco's ASA compatibility guide says 'ASA 9.16(x) was the final version for the ASA 5506-X, 5506H-X, 5506W-X, 5508-X, and 5516-X', with 9.14(x) the final version for the 5525-X, 5545-X and 5555-X and 9.12(x) for the 5512-X, 5515-X and 5585-X. For Firewall Threat Defense, the hardware end-of-life table in Cisco's Threat Defense Compatibility Guide gives the last version as 7.0 for the 5508-X and 5516-X, 6.6 for the 5525-X, 5545-X and 5555-X, 6.4 for the 5515-X and 6.2.3 for the 5506-X, 5506H-X, 5506W-X and 5512-X, and states that 7.0 is the last major Threat Defense release supporting the ASA 5500-X series.

Signature updates have ended on the models whose bulletins date them. EOL13762 set the End of Signature Release for the 5508-X, 5516-X and their 5-year subscriptions at 31 August 2026, which Cisco defines as 'no more signature update release' after that date; EOL13130 gave 30 September 2025 for the 5525-X, 5545-X and 5555-X, and EOL11414 dated the 5512-X and 5515-X End of Signature Release (License) 31 August 2022. With the series past its Last Date of Support, Cisco's vulnerability policy keeps PSIRT open to reports but rules out analysis, fixes, disclosure and CVEs, and the free-update route for customers without a contract (Cisco TAC, quoting the advisory URL) applies only where Cisco has published an update.

ASA software ceiling per model, from Cisco's ASA compatibility guide (updated 24 Mar 2026). 'ASA 9.16(x) was the final version for the ASA 5506-X, 5506H-X, 5506W-X, 5508-X, and 5516-X.' 'ASA 9.14(x) was the final version for the ASA 5525-X, 5545-X, and 5555-X.' 'ASA 9.12(x) was the final version for the ASA 5512-X, 5515-X, 5585-X, and ASASM.' (cisco.com)
Last Firewall Threat Defense (FTD) version per model, from the hardware EOL table in Cisco's Threat Defense Compatibility Guide: 7.0 for the 5508-X/5516-X, 6.6 for the 5525-X/5545-X/5555-X, 6.4 for the 5515-X, and 6.2.3 for the 5506-X/5506H-X/5506W-X and 5512-X. The guide states that Version 7.0 is the last major Firewall Threat Defense release that supports the ASA 5500-X series. (cisco.com)
For the 5506-X/5506H-X FTD-software PIDs, EOL12452 states: 'Firepower Threat Defense Software Version 6.2.3 would be the last supported image on these appliances.' (web.archive.org)
All 5500-X models are past their Last Date of Support. Cisco PSIRT still accepts vulnerability reports for products past that date, but it will not analyse, fix or disclose the vulnerabilities and will not issue CVEs for them. The free-update route for customers without a contract (Cisco TAC, quoting the advisory URL) applies only where Cisco has published an update. (sec.cloudapps.cisco.com)
EOL13762 sets the End of Signature Release for the ASA 5508-X/5516-X and their 5-year subscriptions at 31 Aug 2026. Cisco's definition: 'no more signature update release' after that date. EOL13130 gives 30 Sep 2025 for the 5525-X/5545-X/5555-X. (cisco.com)

What a maintenance contract needs to cover on the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings)

The 5506-X is a desktop unit that can be rack mounted; the 5506H-X can go on a desk, in a rack, on a wall or on a DIN rail; the 5508-X, 5516-X, 5525-X, 5545-X and 5555-X are 1RU and rack-mountable. All seven have eight integrated 1GE ports except the 5506H-X, which has four. Of these seven, only the 5525-X, 5545-X and 5555-X take expansion I/O, six GE copper or six GE SFP ports, and only they have a dedicated 1GE management port; the 5506-X, 5506H-X, 5508-X and 5516-X list management as 'Yes (Shared)'.

The 5506-X, 5508-X and 5516-X carry 50 GB, 80 GB and 100 GB mSATA storage respectively; the 5525-X has one slot with a 120 GB MLC SED, and the 5545-X and 5555-X have two such slots in RAID 1. Among the same seven, dual power supplies are listed only for the 5545-X and 5555-X; the 5506-X, 5506H-X, 5508-X, 5516-X and 5525-X have no power redundancy. These figures do not cover the 5506W-X, 5512-X, 5515-X or 5585-X, so for those take the parts list from the unit itself, then request a quote through the maintenance coverage builder.

ASA 5500-X (5506-X / 5508-X / 5516-X and siblings): what to tell a maintenance provider

The hardware facts a maintenance quote is priced on, printed in the vendor's own wording from its specification documents (cited in Sources). Nothing on this plate is estimated; facts the vendor does not state are left off rather than filled in.

ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) hardware, from Cisco’s own specification documents
Specification	Detail	Source
Form factor	5506-X: desktop, rack mountable; 5506H-X: desktop, rack, wall or DIN-rail; 5508-X, 5516-X, 5525-X, 5545-X, 5555-X: 1RU 19-in. rack-mountable	cisco.com
Integrated I/O	8 x 1GE on 5506-X, 5508-X, 5516-X, 5525-X, 5545-X, 5555-X; 4 x 1GE on 5506H-X	cisco.com
Expansion I/O	5525-X/5545-X/5555-X: 6 GE copper or 6 GE SFP; none on 5506-X/5506H-X/5508-X/5516-X	cisco.com
Management port	5506-X/5506H-X/5508-X/5516-X: 'Yes (Shared)'; 5525-X/5545-X/5555-X: dedicated 1 GE	cisco.com
Storage	5506-X 50 GB mSATA; 5508-X 80 GB mSATA; 5516-X 100 GB mSATA; 5525-X 1 slot 120 GB MLC SED; 5545-X/5555-X 2 slots RAID 1, 120 GB MLC SED	cisco.com
Power redundancy	Dual power supplies only on 5545-X and 5555-X; none on 5506-X, 5506H-X, 5508-X, 5516-X, 5525-X	cisco.com

Extend or refresh the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings)?

Third-party hardware maintenance on a 5500-X fits a defined bridge: a firewall already on its final ASA or Threat Defense release, in a role where running without further Cisco software fixes is acceptable, kept running until its replacement is in. That kind of cover, for example an alternative to Cisco SmartNet, generally deals with failed hardware through diagnosis, parts and engineers; it does not lift the 9.16(x), 9.14(x) or 9.12(x) ceilings or restore Cisco's signature releases.

Beyond that bridge, the security position points to refresh, since PSIRT will not fix newly reported flaws on any 5500-X. Cisco's bulletins name the way forward by model: the Firepower 1000 Series for the 5508-X and 5516-X (EOL13762) and for the ASA-software 5506-X and 5506H-X PIDs (EOL13763), with the Firepower 1010 NGFW desktop (FPR1010-NGFW-K9) named in EOL12452 for the FTD-software 5506 PIDs; the Firepower 2100 Series for the 5525-X, 5545-X and 5555-X; the Firepower 4100 for the 5585-X; and the Meraki MX64W or MX65W, or an external access point used with the ASA5506, for the 5506W-X. EOL11414's migration text describes a move from the ASA5505 to the ASA5506X, an apparent copy error, so it names no usable successor for the 5512-X or 5515-X.

Cisco's bulletins define the Last Date of Support as the date after which 'all support services for the product are unavailable, and the product becomes obsolete.' The 5508-X and 5516-X, among the last groups, reached it on 31 Aug 2026. No 5500-X model can now get Cisco TAC, RMA or software fixes under a Cisco contract. (cisco.com)
The 5506-X/5506H-X dates depend on the software SKU. FTD-software PIDs (ASA5506-FTD-K9, ASA5506-FTD-BUN, ASA5506-FTD-HA-BUN, ASA5506H-FTD-K9, ASA5506H-FTD-BUN) are covered by EOL12452, with Last Date of Support 31 Jul 2024 and named replacement FPR1010-NGFW-K9 (Firepower 1010 NGFW, desktop). ASA-software PIDs are covered by EOL13763, with Last Date of Support 31 Aug 2026. (web.archive.org)
Dates differ by model, and for the 5506-X also by software SKU, so identify the exact PID (each lifecycle entry names its bulletin). Cisco's Threat Defense Compatibility Guide lists end of sale and end of support for most 5500-X models in one table, but it has no 5585-X row. It groups the 5506W-X with the 5506-X/5506H-X at 31 Aug 2026, which conflicts with the 5506W-X hardware bulletin EOL12632 (30 Sep 2023). It also lists separate 1-, 3- and 5-year subscription bulletins with their own dates. (cisco.com)
EOL13130 names the Cisco Firepower 2100 Series as the migration solution for the 5525-X, 5545-X and 5555-X. (cisco.com)
EOL12148 states: 'The migration solution for the ASA5585X is the Cisco Firepower 4100.' (cisco.com)
For the 5506W-X WiFi appliance, EOL12632 names the Meraki MX64W and MX65W as the migration solution, or an external access point used with the Cisco ASA5506. (cisco.com)
The migration text in the 5512-X/5515-X bulletin EOL11414 refers to moving from the ASA5505 to the ASA5506X, an apparent copy error. It names no usable successor for the 5512-X/5515-X. (cisco.com)
A unit on ASA software cannot run releases later than ASA 9.16(x) (5506-X/5506H-X/5506W-X/5508-X/5516-X), 9.14(x) (5525-X/5545-X/5555-X) or 9.12(x) (5512-X/5515-X/5585-X). (cisco.com)

ASA 5500-X (5506-X / 5508-X / 5516-X and siblings): what came before and what replaces it

The successor shown is the one the vendor names in its own end-of-life notice. No predecessor is shown because none could be sourced.

Keep your ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) covered

Tell us how many you run and when your current cover ends, and we will come back with a like-for-like maintenance quote for that estate. Your model and its support status are attached to the enquiry automatically, so there is nothing to re-type.

Cisco maintenance in detail →

Cisco's support page gives 17 July 2014 as the series release date for 'ASA 5500-X with FirePOWER Services', not a launch date for each model. The models fall into groups that follow their bulletins: the 5512-X and 5515-X (EOL11414); the 5585-X and its SSP chassis (EOL12148); the 5506W-X WiFi hardware (EOL12632); the 5525-X, 5545-X and 5555-X (EOL13130); the 5508-X and 5516-X (EOL13762); and the 5506-X and 5506H-X, split between EOL13763 for ASA-software PIDs and EOL12452 for FTD-software PIDs. On ASA software, the 5506-X, 5506H-X, 5506W-X, 5508-X and 5516-X share the 9.16(x) ceiling, and the 5525-X group is the family's link to the Firepower 2100 Series, which EOL13130 made their migration solution.

Where the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) sits against related models

Each bar runs from release to the milestone that marks end of support for the model as a whole. Amber bars end on a third-party tracker's date, not the vendor's. A dashed open end means no end date is published — not that support is indefinite. Component and accessory dates (a management controller, a power module) are not treated as the model's.

Look up another model in the server & network end-of-life checker, or read what third-party maintenance covers.

Questions people ask about the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings)

Is the Cisco ASA 5506-X end of life?

Yes, and its date depends on the PID. ASA5506 and ASA5506H PIDs with ASA software reached their Last Date of Support on 31 August 2026 under EOL13763, while the FTD-software PIDs, such as ASA5506-FTD-K9, reached theirs on 31 July 2024 under EOL12452. The 5506W-X WiFi hardware has a third date, 30 September 2023, in EOL12632.

When did Cisco end support for the ASA 5508-X and 5516-X?

On 31 August 2026, the Last Date of Support in bulletin EOL13762. The same bulletin ended signature releases for both models and their 5-year subscriptions that day, and contract renewals had already closed on 28 October 2025.

What is the last ASA software version for the 5500-X?

It depends on the model. Per Cisco's ASA compatibility guide, the 5506-X, 5506H-X, 5506W-X, 5508-X and 5516-X stop at ASA 9.16(x), the 5525-X, 5545-X and 5555-X at 9.14(x), and the 5512-X, 5515-X and 5585-X at 9.12(x). For Threat Defense, Cisco's compatibility guide states that 7.0 is the last major release supporting the series, and lists it as the last version for the 5508-X and 5516-X.

What replaced the ASA 5525-X, 5545-X and 5555-X?

Bulletin EOL13130 names the Firepower 2100 Series as the migration solution for those three models. For the 5508-X and 5516-X and the ASA-software 5506-X and 5506H-X PIDs, Cisco names the Firepower 1000 Series, and for the 5585-X the Firepower 4100.

Can I get third-party maintenance for an ASA 5500-X?

Third-party maintenance is hardware cover: maintainers generally handle fault diagnosis, replacement parts and engineer visits, and that work does not depend on a vendor support date, which matters because every 5500-X is past its Cisco Last Date of Support. It cannot move a unit past its final ASA or Threat Defense release. A quote for network third-party maintenance can be requested per model and PID.

Sources

Every date, rule and specification above was checked against these on 8 October 2026 by an independent verification pass. Vendors revise lifecycle notices; this page is re-checked by 8 January 2027.

End-of-Sale and End-of-Life Announcement for the Cisco ASA5506 Series Security Appliance with ASA software (EOL13763) — cisco.com
End-of-Sale and End-of-Life Announcement for the Cisco 5506 appliances and licenses with FTD software (EOL12452), archived copy — web.archive.org
End-of-Sale and End-of-Life Announcement for the Cisco ASA5506W-X WiFi Security Appliances (EOL12632) — cisco.com
End-of-Sale and End-of-Life Announcement for the Cisco ASA5508 and ASA5516 Series Security Appliance and 5 YR Subscriptions (EOL13762) — cisco.com
End-of-Sale and End-of-Life Announcement for the Cisco ASA 5512-X and ASA 5515-X (EOL11414) — cisco.com
End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions (EOL13130) — cisco.com
End-of-Sale and End-of-Life Announcement for the Cisco ASA 5585-X Adaptive Security Appliance (EOL12148) — cisco.com
ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) release — cisco.com
cisco.com — cisco.com
cisco.com — cisco.com
sec.cloudapps.cisco.com — sec.cloudapps.cisco.com
cisco.com — cisco.com

Last reviewed 7 October 2026. Lifecycle dates for the ASA 5500-X (5506-X / 5508-X / 5516-X and siblings) are re-verified against Cisco's own notices at each review; a date a vendor has not published is never filled in.