ASA support specifics

Security Cloud Control Firewall Management support for ASA has these constraints:

  • Security Cloud Control Firewall Management can manage all ASA platforms that run currently supported code versions, including ASAv instances.

  • Security Cloud Control Firewall Management does not support ASA Services Module (ASASM).

  • Security Cloud Control Firewall Management does not test end-of-life ASA code versions and does not recommend them for production.

  • Use currently supported ASA code versions for optimal results.

  • ASA 8.3 is not supported with the new policy view.

  • Security Cloud Control Firewall Management does not manage the ASA FirePOWER module because the module runs a different operating system from ASA. Manage the ASA FirePOWER module separately with Secure Firewall Management Center or ASDM.

  • End-of-life code and hardware might continue to work with Security Cloud Control Firewall Management. Because end-of-life code and hardware are not part of Security Cloud Control Firewall Management testing, correct operation with end-of-life software and hardware is not guaranteed or assured.

    Refer to the version download page for Cisco "suggested release" or "gold star" versions.

  • ASA versions 8.x, 9.1, and 9.2 do not support TLS 1.2 on the management plane and are considered insecure for ASA software management.

For a full discussion of ASA, ASDM, and hardware compatiblity, see the Cisco Secure Firewall ASA Compatibility guide.