Firepower 2100 End of Life: Support to May 2030

Firepower 2100 Series (2110 / 2120 / 2130 / 2140) support dates

Every row names its basis. A third-party tracker date is not the vendor’s own, and “not published” means exactly that.
Milestone	Date	Basis	Source
End-of-Life Announcement Date	26 November 2024	Vendor-publishedEOL15548 covers the Firepower 2100 Series appliances (ASA, NGFW and NGIPS PIDs for the 2110/2120/2130/2140), their network modules and FIPS kits, and the 5-year subscriptions. All share one Table 1.	End-of-Sale and End-of-Life Announcement for the Cisco Firepower 2100 Series Security Appliances & 5 YR Subscriptions (EOL15548)
End-of-Sale Date: HW, License	27 May 2025	Vendor-published	Cisco EOL15548
Last Ship Date: HW, License	25 August 2025	Vendor-published	Cisco EOL15548
End of SW Maintenance Releases Date: HW	27 May 2026	Vendor-published	Cisco EOL15548
End of Routine Failure Analysis Date: HW	27 May 2026	Vendor-published	Cisco EOL15548
End of New Service Attachment Date: HW	27 May 2026	Vendor-publishedPassed. Equipment not covered by a contract can no longer be added to a Cisco service contract.	Cisco EOL15548
End of Service Contract Renewal Date: HW	22 August 2029	Vendor-published	Cisco EOL15548
End of Vulnerability/Security Support: HW	31 May 2030	Vendor-published	Cisco EOL15548
Last Date of Support: HW	31 May 2030	Vendor-publishedCisco's Firepower 2100 Series support page also shows End-of-Support Date 31-MAY-2030.	Cisco EOL15548

Where the Firepower 2100 Series (2110 / 2120 / 2130 / 2140) stands today

EOL15548, published on 26 November 2024, is one end-of-life bulletin for the whole series: the ASA, NGFW and NGIPS PIDs of all four models, their network modules and FIPS kits, and the 5-year subscriptions share one Table 1. End of sale came on 27 May 2025, with the last ship date on 25 August 2025. End of SW Maintenance Releases, End of Routine Failure Analysis and End of New Service Attachment fell together on 27 May 2026. The 31 May 2030 date carries two milestones, End of Vulnerability/Security Support and the Last Date of Support, and is also the End-of-Support date on Cisco's Firepower 2100 support page.

Cisco's dates attach to product IDs rather than serials, and every PID in Table 2 of EOL15548 shares the same Table 1 dates, so an FPR2110-ASA-K9 and an FPR2140-NGFW-K9 follow the same timetable, as do bundles, network modules, the FIPS kit and 5-year subscription PIDs such as FPR2110T-TMC-5Y; the bulletin has no separate End of Signature Release milestone. To see whether a particular appliance is covered, enter its serial number in Cisco's Device Coverage Checker, which needs a Cisco account sign-in; an appliance it reports as uncovered can no longer be put on a Cisco contract.

Firepower 2100 Series (2110 / 2120 / 2130 / 2140): lifecycle on one axis

Dated milestones are placed only where a source gives the date; Blue = vendor-published, amber = third-party tracker, violet = derived from a vendor policy. Checked 8 October 2026.

Finding the date for your own unit

Cisco's dates apply model-wide, by PID, not per serial. Every Firepower 2110/2120/2130/2140 PID in Table 2 of bulletin EOL15548 shares the same Table 1 dates: ASA-K9, NGFW-K9, NGIPS-K9, bundles, network modules, FIPS kit and 5-year subscriptions (https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/firepower-2100-series-sec-app-5-yr-sub-eol.pdf). Contract coverage for your own unit is per serial: Cisco's Device Coverage Checker (https://cway.cisco.com/sncheck/) checks service contract coverage by serial number and needs a Cisco account sign-in.

What still works after Cisco support ends

Software for the 2100 now has fixed ceilings. The hardware end-of-life table in Cisco's Threat Defense Compatibility Guide lists 7.4 as the last Threat Defense device version for the 2110, 2120, 2130 and 2140, and shows the last management center version able to manage them as 'TBD'. For appliances running ASA software, Cisco's ASA compatibility guide states: 'ASA 9.20(x) was the final version for the Firepower 2100 series.' Since End of SW Maintenance on 27 May 2026, Cisco no longer releases general maintenance releases or bug fixes for this hardware, though planned security remedies can continue until 31 May 2030.

Without a contract, a fix for a published vulnerability can still be requested where Cisco's advisory offers a free software update, typically for Critical or High severity and at Cisco's case-by-case discretion; the request goes to Cisco TAC with the advisory URL. After 31 May 2030, Cisco's policy is that PSIRT will not analyse, fix or disclose vulnerabilities in the 2100, and it issues no CVEs for it. Until 31 May 2030, covered appliances keep Cisco Support, the service called Smart Net Total Care before 15 June 2025.

Software ceiling: the hardware EOL table in Cisco's Threat Defense Compatibility Guide lists 7.4 as the last Threat Defense (FTD) device version for the Firepower 2110, 2120, 2130 and 2140. The last management center version that can manage them is listed as 'TBD'. (cisco.com)
For appliances running ASA software, Cisco's ASA compatibility guide states: 'ASA 9.20(x) was the final version for the Firepower 2100 series.' (cisco.com)
End of SW Maintenance passed on 27 May 2026, so Cisco no longer releases general maintenance releases or bug fixes for this hardware. Planned security remedies can continue until the End of Vulnerability/Security Support on 31 May 2030. (cisco.com)
Where a Cisco security advisory offers a free software update (typically Critical/High, at Cisco's discretion case by case), a customer without a contract can request it from Cisco TAC with the advisory URL. After the Last Date of Support (31 May 2030), PSIRT will not analyse, fix or disclose vulnerabilities in this product and issues no CVEs for it. (sec.cloudapps.cisco.com)

Vendor support you can still buy

Cisco Support (Smart Net Total Care before 15 June 2025): renewal of existing contracts — Existing contracts can be renewed or extended until 22 Aug 2029 (End of Service Contract Renewal). New attachment for uncovered units closed on 27 May 2026. Coverage ends on 31 May 2030. (cisco.com)

What a maintenance contract needs to cover on the Firepower 2100 Series (2110 / 2120 / 2130 / 2140)

All four models are 1RU at 1.73 x 16.90 x 19.76 inches (4.4 x 42.9 x 50.2 cm) with twelve 10M/100M/1GBASE-T RJ-45 ports, but the hardware behind that splits into two pairs a contract must tell apart. The 2110 and 2120 add four 1G SFP ports, take no network modules, run on a single integrated 250 W AC supply with no redundancy, and are cooled by four integrated fans, two internal and two exhaust. The 2130 and 2140 add four 10G SFP+ ports, accept 10G SFP+ and 1/10G fail-to-wire (FTW) network modules, and cool through one hot-swappable fan module holding four fans.

The 2130 has a single 400 W AC supply, with dual 400 W AC or single or dual 350 W DC as options; the 2140 has dual 400 W AC, with single or dual 350 W DC optional; with dual supplies fitted, either gives 1+1 AC or DC redundancy. Storage is one 100 GB drive on the 2110 and 2120 or one 200 GB drive on the 2130 and 2140, each with a spare slot for MSP. Note the model, network modules, power configuration and any FIPS kit for each appliance, then request a quote through the maintenance coverage builder.

Firepower 2100 Series (2110 / 2120 / 2130 / 2140): what to tell a maintenance provider

The hardware facts a maintenance quote is priced on, printed in the vendor's own wording from its specification documents (cited in Sources). Nothing on this plate is estimated; facts the vendor does not state are left off rather than filled in.

Firepower 2100 Series (2110 / 2120 / 2130 / 2140) hardware, from Cisco’s own specification documents
Specification	Detail	Source
Form factor	1RU on all four models; 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm)	cisco.com
Integrated I/O	2110/2120: 12 x 10M/100M/1GBASE-T RJ-45 + 4 x 1G SFP; 2130/2140: 12 x 10M/100M/1GBASE-T RJ-45 + 4 x 10G SFP+	cisco.com
Network modules	None on 2110/2120; 2130/2140 accept 10G SFP+ and 1/10G fail-to-wire (FTW) network module options	cisco.com
Storage	2110/2120: 1 x 100 GB plus 1 spare slot (for MSP); 2130/2140: 1 x 200 GB plus 1 spare slot (for MSP)	cisco.com
Power supplies	2110/2120: single integrated 250W AC, no redundancy; 2130: single 400W AC, dual 400W AC optional, single/dual 350W DC optional; 2140: dual 400W AC, single/dual 350W DC optional; 2130/2140 give 1+1 AC or DC redundancy with dual supplies	cisco.com
Cooling	2110/2120: 4 integrated fans (2 internal, 2 exhaust); 2130/2140: 1 hot-swappable fan module (4 fans)	cisco.com

Extend or refresh the Firepower 2100 Series (2110 / 2120 / 2130 / 2140)?

A 2100 already under a Cisco contract can stay on it for some time: support continues to 31 May 2030, renewals stay open until 22 August 2029 and planned security remedies can continue until 31 May 2030, so staying put is reasonable while Threat Defense 7.4 or ASA 9.20(x) does what you need. The harder case is a 2100 that missed the 27 May 2026 attachment cut-off. For those units, network third-party maintenance is one option; it typically covers hardware faults with diagnosis, spare parts and engineer visits. Cisco Refresh, Cisco's certified remanufactured programme, may also have 2100 units in limited supply until the Last Date of Support, according to the bulletin.

Refresh pressure comes from the software cap rather than the support date. Features that arrive in Threat Defense releases after 7.4 will not reach the 2100, and general bug-fix releases ended in May 2026, so an appliance that needs a later release has no path on this hardware. EOL15548 names the Cisco Secure Firewall 3100 Series, written in the bulletin as 'Cisco Firewall 3100 Series', as the successor. Firewalls that need post-7.4 features, or estates that would otherwise be renewing Cisco contracts into 2029, are the ones to plan for first.

End of New Service Attachment passed on 27 May 2026. A Firepower 2100 not already under a Cisco contract can no longer be added to one, even though Cisco supports covered units until 31 May 2030. Existing contracts can be renewed until 22 Aug 2029. (cisco.com)
These appliances are capped at Threat Defense 7.4, so features in later FTD releases will not reach them. (cisco.com)
The 5-year subscription PIDs (for example FPR2110T-TMC-5Y) are listed in the same Table 2 of EOL15548 and share its Table 1 dates. The bulletin has no separate End of Signature Release milestone. (cisco.com)
Cisco says remanufactured units may be available in limited supply through its Cisco Refresh (certified remanufactured) program until the Last Date of Support. (cisco.com)

Firepower 2100 Series (2110 / 2120 / 2130 / 2140): what came before and what replaces it

The successor shown is the one the vendor names in its own end-of-life notice.

Keep your Firepower 2100 Series (2110 / 2120 / 2130 / 2140) covered

Tell us how many you run and when your current cover ends, and we will come back with a like-for-like maintenance quote for that estate. Your model and its support status are attached to the enquiry automatically, so there is nothing to re-type.

Cisco maintenance in detail →

Cisco gives 21 February 2017 as the series release date on its Firepower 2100 support page. The series sits between two Cisco-named migrations: EOL13130, the end-of-life bulletin for the ASA 5525-X, 5545-X and 5555-X, pointed their owners to the 2100, and EOL15548 now points 2100 owners to the Secure Firewall 3100 Series. Inside the series, the 2110 and 2120 have no network modules and a single integrated supply, while the 2130 and 2140 add network module options, a hot-swappable fan module and dual supplies, fitted on the 2140 and optional on the 2130.

Where the Firepower 2100 Series (2110 / 2120 / 2130 / 2140) sits against related models

Each bar runs from release to the milestone that marks end of support for the model as a whole. Amber bars end on a third-party tracker's date, not the vendor's. A dashed open end means no end date is published — not that support is indefinite. Component and accessory dates (a management controller, a power module) are not treated as the model's.

Look up another model in the server & network end-of-life checker, or read what third-party maintenance covers.

Questions people ask about the Firepower 2100 Series (2110 / 2120 / 2130 / 2140)

Is the Cisco Firepower 2100 end of life?

Cisco announced its end of life on 26 November 2024 and ended sales on 27 May 2025, but appliances under a Cisco contract are still supported. Bulletin EOL15548 sets the Last Date of Support for the 2110, 2120, 2130 and 2140 at 31 May 2030.

Can I still add a Firepower 2110 or 2140 to a Cisco support contract?

Not unless it is already covered. The End of New Service Attachment date was 27 May 2026, so an uncovered appliance can no longer be added to a Cisco contract. Renewing or extending a contract that already covers the appliance remains possible up to 22 August 2029.

What is the last FTD version for the Firepower 2100?

Version 7.4. That is the last Threat Defense device version Cisco's compatibility guide lists for the 2110, 2120, 2130 and 2140, while the last management center version able to manage them is shown as 'TBD'. On ASA software the ceiling is 9.20(x).

What replaces the Firepower 2100?

The successor named in EOL15548 is the Cisco Secure Firewall 3100 Series, which the bulletin itself calls the 'Cisco Firewall 3100 Series'. The 2100 had filled the same role for an older line: Cisco named it as the migration solution for the ASA 5525-X, 5545-X and 5555-X.

Is third-party maintenance available for the Firepower 2100?

Third-party maintenance is hardware cover, typically fault diagnosis, replacement parts and engineers, and it is not bound by Cisco's 31 May 2030 date. It is relevant now for appliances that can no longer join a Cisco contract, though it does not change the Threat Defense 7.4 or ASA 9.20(x) ceilings. For a price, send each appliance's model and power configuration with a quote request through Cisco third-party maintenance.

Sources

Every date, rule and specification above was checked against these on 8 October 2026 by an independent verification pass. Vendors revise lifecycle notices; this page is re-checked by 8 January 2027.

End-of-Sale and End-of-Life Announcement for the Cisco Firepower 2100 Series Security Appliances & 5 YR Subscriptions (EOL15548) — cisco.com
Firepower 2100 Series (2110 / 2120 / 2130 / 2140) release — cisco.com
cisco.com — cisco.com
cisco.com — cisco.com
sec.cloudapps.cisco.com — sec.cloudapps.cisco.com
cisco.com — cisco.com

Last reviewed 7 October 2026. Lifecycle dates for the Firepower 2100 Series (2110 / 2120 / 2130 / 2140) are re-verified against Cisco's own notices at each review; a date a vendor has not published is never filled in.