Cisco ASA Compatibility

Last Updated: March 21, 2016

This document lists the Cisco ASA software and hardware compatibility and requirements.
 ASA and ASDM Compatibility, page 1
 ASA and VPN Compatibility, page 8
 ASA and FXOS Compatibility, page 8
 ASA Services Module, IOS, and Switch Compatibility, page 9
 ASAv Hypervisor Compatibility, page 10
 ASA REST API Compatibility, page 11
 ASA 5506W-X Wireless Access Point Software Compatibility, page 12
 ASA 5500 and Module Compatibility, page 12
 ASA Clustering External Hardware Support, page 20
 ASA and Cisco Application Policy Infrastructure Controller (APIC) Compatibility, page 21
 ASA 1000V Compatibility, page 22
 ASA Memory Information, page 22

ASA and ASDM Compatibility

This section lists ASA and ASDM compatibility for current and legacy ASA models.
 Current Models, page 1
 Legacy Models, page 6

Current Models
The following table lists ASA and ASDM compatibility for current models.
 ASA and ASDM Compatibility: 9.6 to 9.5, Current Models, page 2
 ASA and ASDM Compatibility: 9.4 to 9.3, Current Models, page 3
 ASA and ASDM Compatibility: 9.2 to 9.1, Current Models, page 3
 ASA and ASDM Compatibility: 9.0 to 8.4, Current Models, page 4
 ASA and ASDM Compatibility: 8.3 to 7.2, Current Models, page 5

Cisco Systems, Inc. www.cisco.com

1
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 1 ASA and ASDM Compatibility: 9.6 to 9.5, Current Models

ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 9.6(1) ASDM 7.6(1) No YES YES YES YES YES YES YES
ASA ASDM 7.5(2.153) and No No No No YES No No No
9.5(2.200) later. Recommended:
7.6(1).
ASA ASDM 7.5(2) and later. No No No No No No YES No
9.5(2.1) Recommended: 7.6(1).
ASA 9.5(2) ASDM 7.5(2) and later. No YES YES YES YES YES No YES
Recommended: 7.6(1).
ASA ASDM 7.5(1) and later. No No No No YES No No No
9.5(1.200) Recommended: 7.6(1).
ASA ASDM 7.5(1.112) and No YES YES YES YES YES No No
9.5(1.5) later. Recommended:
7.6(1).
ASA 9.5(1) ASDM 7.5(1) and later. No YES YES YES YES YES No No
Recommended: 7.6(1).

2
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 2 ASA and ASDM Compatibility: 9.4 to 9.3, Current Models

ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA ASDM 7.5(1.112) and No No No No No No YES No
9.4(2.145) later. Recommended:
7.6(1).
ASA 9.4(2) ASDM 7.5(1) and later. No YES YES YES YES YES No No
Recommended: 7.6(1).
ASA ASDM 7.5(1) and later. No No No No No No No YES
9.4(1.225) Recommended: 7.6(1).
ASA ASDM 7.4(2) and later. No No No No YES No No No
9.4(1.200) Recommended: 7.6(1).
ASA ASDM 7.4(3) and later. No No No No No No YES No
9.4(1.152) Recommended: 7.6(1).
ASA 9.4(1) ASDM 7.4(1) and later. No YES YES YES YES YES No No
Recommended: 7.6(1).
ASA ASDM 7.3(2) and later. No No No No YES No No No
9.3(2.200) Recommended: 7.6(1).
ASA 9.3(2) ASDM 7.3(3) and later. No YES YES YES YES YES No No
Recommended: 7.6(1). (5506-X
only)
ASDM 7.3(2) and later. No YES YES YES YES YES No No
Recommended: 7.6(1). (5506-X
only)
ASA 9.3(1) ASDM 7.3(1) and later. No No YES YES YES YES No No
Recommended: 7.6(1).

Table 3 ASA and ASDM Compatibility: 9.2 to 9.1, Current Models

ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 9.2(4) ASDM 7.4(3) and later. YES No YES YES YES YES No No
Recommended: 7.6(1).
ASA 9.2(3) ASDM 7.3(1.101) and YES No YES YES YES YES No No
later. Recommended:
7.6(1).
ASA ASDM 7.2(2) and later. YES No YES YES YES YES No No
9.2(2.4) Recommended: 7.6(1).

3
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 3 ASA and ASDM Compatibility: 9.2 to 9.1, Current Models (continued)
ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 9.2(1) ASDM 7.2(1) and later. YES No YES YES YES YES No No
Recommended: 7.6(1).
ASA ASDM 7.5(2) and later. YES No YES YES No YES No No
9.1(7.4) Recommended: 7.6(1).
ASA 9.1(6) ASDM 7.1(7) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.1(5) ASDM 7.1(6) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.1(4) ASDM 7.1(5) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.1(3) ASDM 7.1(4) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.1(2) ASDM 7.1(3) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.1(1) ASDM 7.1(1) and later. YES No YES YES No YES No No
Recommended: 7.6(1).

Table 4 ASA and ASDM Compatibility: 9.0 to 8.4, Current Models

ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 9.0(4) ASDM 7.1(4) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.0(3) ASDM 7.1(3) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.0(2) ASDM 7.1(2) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA 9.0(1) ASDM 7.0(1) and later. YES No YES YES No YES No No
Recommended: 7.6(1).
ASA ASDM 6.7(1). No No No No No No No No
8.7(1.1)
ASA 8.6(1) ASDM 6.6(1). No No YES No No No No No
ASA 8.5(1) ASDM 6.5(1). No No No No No YES No No

4
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 4 ASA and ASDM Compatibility: 9.0 to 8.4, Current Models (continued)
ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 8.4(7) ASDM 7.1(3) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.4(6) ASDM 7.1(2.102) and YES No No YES No No No No
later. Recommended:
7.6(1).
ASA 8.4(5) ASDM 7.0(2) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA ASDM 6.4(9) and later. YES No No YES No No No No
8.4(4.1) Recommended: 7.6(1).
ASA 8.4(3) ASDM 6.4(7) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.4(2) ASDM 6.4(5) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.4(1) ASDM 6.4(1) and later. YES No No YES No No No No
Recommended: 7.6(1).

Note: For ASA 8.0(2), 8.0(3), and 8.0(4), ASDM 6.2 and later are not compatible for read-only users unless you
add the following command: privilege cmd level 5 mode exec command copy.

Table 5 ASA and ASDM Compatibility: 8.3 to 7.2, Current Models

ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 8.3(2) ASDM 6.3(2) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.3(1) ASDM 6.3(1) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.2(5) ASDM 6.4(3) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.2(4) ASDM 6.3(5) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.2(3) ASDM 6.3(4) and later. YES No No YES No No No No
Recommended: 7.6(1).
ASA 8.2(2) ASDM 6.2(5) and later. YES No No No No No No No
Recommended: 7.6(1).

5
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 5 ASA and ASDM Compatibility: 8.3 to 7.2, Current Models (continued)
ASA OS ASDM ASA Model:
ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506H-X, 5515-X, Security
5506W-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
ASA 8.2(1) ASDM 6.2(1) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.1(2) ASDM 6.1(5) and later. No No No No No No No No
Recommended: 7.6(1).
ASA 8.1(1) ASDM 6.1(1) and later. No No No No No No No No
Recommended: 7.6(1).
ASA 8.0(5) ASDM 6.2(3) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.0(4) ASDM 6.1(3) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.0(3) ASDM 6.0(3) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 8.0(2) ASDM 6.0(2) and later. YES No No No No No No No
Recommended: 7.6(1).
ASA 7.2 ASDM 5.2. YES No No No No No No No
Recommended: 5.2(4).

Legacy Models
The following table lists ASA and ASDM compatibility for legacy ASA models.
Note: For ASA 8.0(2), 8.0(3), and 8.0(4), ASDM 6.2 and later are not compatible for read-only users unless you
add the following command: privilege cmd level 5 mode exec command copy.

Table 6 ASA and ASDM Compatibility: Legacy Models

ASA OS ASDM ASA Model:
ASA 5510, ASA 5550 ASA 5580 ASA
5520, 5540 1000V
ASA 9.2(1) ASDM 7.2(1) and later. Recommended: No No No No
7.6(1).
ASA 9.1(7.4) ASDM 7.5(2) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.1(6) ASDM 7.1(7) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.1(5) ASDM 7.1(6) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.1(4) ASDM 7.1(5) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.1(3) ASDM 7.1(4) and later. Recommended: YES YES YES No
7.6(1).

6
Cisco ASA Compatibility

ASA and ASDM Compatibility

Table 6 ASA and ASDM Compatibility: Legacy Models (continued)

ASA OS ASDM ASA Model:
ASA 5510, ASA 5550 ASA 5580 ASA
5520, 5540 1000V
ASA 9.1(2) ASDM 7.1(3) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.1(1) ASDM 7.1(1) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.0(4) ASDM 7.1(4) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.0(3) ASDM 7.1(3) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.0(2) ASDM 7.1(2) and later. Recommended: YES YES YES No
7.6(1).
ASA 9.0(1) ASDM 7.0(1) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.7(1.1) ASDM 6.7(1). No No No YES
ASA 8.6(1) ASDM 6.6(1). No No No No
ASA 8.5(1) ASDM 6.5(1). No No No No
ASA 8.4(7) ASDM 7.1(3) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.4(6) ASDM 7.1(2.102) and later. YES YES YES No
Recommended: 7.6(1).
ASA 8.4(5) ASDM 7.0(2) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.4(4.1) ASDM 6.4(9) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.4(3) ASDM 6.4(7) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.4(2) ASDM 6.4(5) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.4(1) ASDM 6.4(1) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.3(2) ASDM 6.3(2) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.3(1) ASDM 6.3(1) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.2(5) ASDM 6.4(3) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.2(4) ASDM 6.3(5) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.2(3) ASDM 6.3(4) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.2(2) ASDM 6.2(5) and later. Recommended: YES YES YES No
7.6(1).

7
Cisco ASA Compatibility

ASA and VPN Compatibility

Table 6 ASA and ASDM Compatibility: Legacy Models (continued)

ASA OS ASDM ASA Model:
ASA 5510, ASA 5550 ASA 5580 ASA
5520, 5540 1000V
ASA 8.2(1) ASDM 6.2(1) and later. Recommended: YES YES YES No
7.6(1).
ASA 8.1(2) ASDM 6.1(5) and later. Recommended: No No YES No
7.6(1).
ASA 8.1(1) ASDM 6.1(1) and later. Recommended: No No YES No
7.6(1).
ASA 8.0(5) ASDM 6.2(3) and later. Recommended: YES YES No No
7.6(1).
ASA 8.0(4) ASDM 6.1(3) and later. Recommended: YES YES No No
7.6(1).
ASA 8.0(3) ASDM 6.0(3) and later. Recommended: YES YES No No
7.6(1).
ASA 8.0(2) ASDM 6.0(2) and later. Recommended: YES YES No No
7.6(1).
ASA 7.2 ASDM 5.2. Recommended: 5.2(4). YES YES No No
ASA 7.1(2) ASDM 5.1(2) YES YES No No
ASA 7.1(1) ASDM 5.1. Recommended: 5.1(2). YES No No No
ASA 7.0 ASDM 5.0. Recommended: 5.0(8). YES No No No

ASA and VPN Compatibility

For ASA and VPN compatibility, see Supported VPN Platforms, Cisco ASA 5500 Series.

ASA and FXOS Compatibility

The following table lists compatibility between the ASA OS, FXOS, and Firepower models.

Table 7 ASA and FXOS Compatibility

FXOS Firepower Model ASA OS
1.1(1.147) Firepower 9300 9.4(1.152)
1.1(1.160) Firepower 9300 9.4(1.152)
1.1(2.51) Firepower 9300 9.4(1.152)
1.1(2.178) Firepower 9300 9.4(1.152)
9.4(2.145)
9.4(2.146)
1.1(3.84) Firepower 9300 9.5(2.1)

8
Cisco ASA Compatibility

ASA Services Module, IOS, and Switch Compatibility

Table 7 ASA and FXOS Compatibility (continued)

FXOS Firepower Model ASA OS
1.1(3.86) Firepower 9300 9.5(2.2)
1.1(4.x) Firepower 4110 9.6(1)
Firepower 4120
Firepower 4140
Firepower 9300

ASA Services Module, IOS, and Switch Compatibility

The following table shows the switch hardware and software compatibility.

Table 8 Support for the ASASM

ASA OS Switch Supervisor Engine or Route Switch Processor Cisco IOS
Hardware Release
9.0(1) and Cisco 7604, SUP 2T with MSFC5 & PFC4 (VS-S2T-10G) 15.1(1)SY and
later 7609-S, 7613-S SUP 2T with MSFC5 & PFC4XL (VS-S2T-10G-XL) later

9.0(1) and Cisco 7606-S, RSP 720 with 10GE ports, MSFC4 & PFC-3C 15.2(4)S2 or
later 7609-S (RSP720-3C-10GE) later
RSP 720 with 10GE ports, MSFC4 & PFC-3CXL
(RSP720-3CXL-10GE)
RSP 720 with 2GE ports, MSFC4 & PFC-3C (RSP720-3C-GE)
RSP 720 with 2GE ports, MSFC4 & PFC-3CXL
(RSP720-3CXL-GE)
SUP 720 with MSFC3 & PFC3B (WS-SUP720-3B)
SUP 720 with MSFC3 & PFC3BXL (WS-SUP720-3BXL)
8.5(1.7) and Catalyst 6500-E SUP 2T with MSFC5 & PFC4 (VS-S2T-10G) 15.0(1)SY1 and
later SUP 2T with MSFC5 & PFC4XL (VS-S2T-10G-XL) later

9
Cisco ASA Compatibility

ASAv Hypervisor Compatibility

Table 8 Support for the ASASM

ASA OS Switch Supervisor Engine or Route Switch Processor Cisco IOS
Hardware Release
8.5(1) and Catalyst 6500-E SUP 720-10GE with MSFC3 & PFC3C (VS-S720-10G-3C) 12.2(33)SXJ2
later SUP 720-10GE with MSFC3 & PFC3CXL and later
(VS-S720-10G-3CXL) (Originally-supp
SUP 720 with MSFC3 & PFC3B (WS-SUP720-3B) orted Cisco IOS
Version
SUP 720 with MSFC3 & PFC3BXL (WS-SUP720-3BXL) 12.2(33)SXJ1
has a caveat
(CSCts88817)
that can cause
the ASASM to
reload under
certain
circumstances.
Therefore, we
recommend
using Version
12.2(33)SXJ2 or
later.)
8.5(1) and Catalyst 6800 SUP 2T with MSFC5 & PFC4 (VS-S2T-10G) 15.1(2)SY1 and
later series SUP 2T with MSFC5 & PFC4XL (VS-S2T-10G-XL) later

ASAv Hypervisor Compatibility

You can deploy the ASAv on the following hypervisors.

Table 9 ASAv Hypervisor Compatibility

Hypervisor Version and Details ASAv OS
Amazon Web Services Amazon Web Services only supports models ASA 9.4(1.200), 9.5(1)
ASAv10 and ASAv30. and later
Kernel-based Virtual Machine (KVM)  qemu-kvm, libvirt-bin, bridge-utils, ASA 9.3(2.200), 9.4(1)
virt-manager, genisoimage, virtinst, and virsh and later
tools (part of KVM installation).
 Linux Ubuntu 14.04 LTS host.
The ASAv has been extensively tested on an
Ubuntu 14.04 LTS host, but you can use other
Linux distributions.
Microsoft Azure The ASAv10 is supported on a Standard D3 virtual ASA 9.5(2.200)
machine.
Microsoft Hyper-V supervisor ASA 9.5(1.200) and
later

10
Cisco ASA Compatibility

ASA REST API Compatibility

Table 9 ASAv Hypervisor Compatibility (continued)

Hypervisor Version and Details ASAv OS
VMware vSphere 5.x: ASA 9.2(1) and later
 ESXi Server
 vCenter Server
 vSphere Web Client or vSphere Client for
Windows or Linux
See the VMware documentation for more
information about vSphere and hardware
requirements:
http://www.vmware.com/support/pubs/
Note: You cannot install the ASAv directly on an ESXi
host without using vCenter.
Note: You cannot deploy the ASAv using vCloud
Director.
 You can now install the ASAv directly on an ESXi ASA 9.4(1.200), 9.5(1)
host without using vCenter. and later
 OVFTool support
6.x: ASA 9.4(1.200), 9.5(1)
and later
 ESXi Server
 (Optional) vCenter Server
 vSphere Web Client, vSphere Client, or OVFTool
for Windows or Linux
See the VMware documentation for more
information about vSphere and hardware
requirements:
http://www.vmware.com/support/pubs/
Note: You cannot deploy the ASAv using vCloud
Director.

ASA REST API Compatibility

The following table lists ASA REST API and ASA compatibility.

11
Cisco ASA Compatibility

ASA 5506W-X Wireless Access Point Software Compatibility

Table 10 ASA REST API Compatibility

ASA ASA OS ASA Model:
REST API ASA ASA ASA ASA ASAv ASASM Firepower ISA
5505 5506-X, 5512-X, 5585-X 9300 ASA 3000
5506W-X, 5515-X, Security
5506H-X, 5525-X, Module
5508-X, 5545-X,
5516-X 5555-X
API 1.2(2) 9.4(1.225) No YES YES YES YES No YES YES
9.5(1)
9.5(1.5)
9.5(1.200)
9.5(2)
9.5(2.1)
API 1.2(1) 9.4(1.225) No YES YES YES YES No No YES
9.5(1)
9.5(1.5)
9.5(1.200)
API 1.1(2) 9.4(1.152) No No No No No No YES No
9.4(2)
API 1.1(1) 9.4(1) No YES YES YES YES No No No
9.4(1.200)
API 1.0(1) 9.3(2) No YES YES YES YES No No No
(5506-X
only)

ASA 5506W-X Wireless Access Point Software

Compatibility
The ASA 5506W-X includes a Cisco Aironet 702i wireless access point integrated into the ASA. The access point
includes an autonomous Cisco IOS image, which enables individual device management. You can install the
lightweight image if you want to add the ASA 5506W-X to a Cisco Unified Wireless Network and use a wireless
LAN controller. See the Converting Autonomous Access Points to Lightweight Mode chapter in the Cisco Wireless
Control Configuration Guide for more information about using the lightweight image in unified mode.
The following table shows the supported software for the access point as well as the supported Cisco Wireless
LAN Controller software if you convert to unified mode.

Table 11 ASA 5506W-X Wireless Access Point Software Compatibility

Built-in Access Point Cisco IOS Release Cisco Wireless LAN Controller Release
Aironet 702i 15.3(3)JBB and later 8.1.102.0 and later

ASA 5500 and Module Compatibility

Many ASA models support service and I/O modules. This section lists the modules supported for current and
legacy ASA models.
 Current Models, page 13

12
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

 Legacy Models, page 18

Current Models
The following table shows the modules supported on each ASA model. To see the ASDM versions supported for
each ASA version on your model, see ASA and ASDM Compatibility, page 1.
Note: For the IPS module, ASDM 7.1(6) and later are not compatible with IPS 7.3(2) and earlier. To manage an IPS
module on an ASA, you must connect to the IPS IP address directly through your browser.

Table 12 ASA Module Compatibility

ASA Model Modules Supported Module OS ASA OS
ASA 5505 ASA Advanced Inspection and Prevention (AIP) 6.2 ASA 8.2(1) and later
SSC-5
(IPS 7.0 and later
is not supported)
ASA 5506-X ASA FirePOWER software module 6.0.1 ASA 9.6(1)
Management: ASA 9.4(2) and later
without ASDM
 ASDM 7.6(1)
management
 Firepower
Management
Center 6.0.1
6.0 ASA 9.5(1.5) and later
Management: ASA 9.4(2) and later
without ASDM
 ASDM
management
7.5(1.112)
and later
 Firepower
Management
Center 6.0
5.4.1 ASA 9.3(2) and later
Management:
 ASDM 7.3(3)
and later
 FireSIGHT
Manager
5.4.1

13
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 12 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5506H-X, ASA FirePOWER software module 6.0.1 ASA 9.6(1)
5506W-X,
Management: ASA 9.4(2) and later
5508-X,
without ASDM
5516-X  ASDM 7.6(1)
management
 Firepower
Management
Center 6.0.1
6.0 ASA 9.5(1.5) and later
Management: ASA 9.4(2) and later
without ASDM
 ASDM
management
7.5(1.112)
and later
 Firepower
Management
Center 6.0
5.4.1 ASA 9.4(1) and later
Management:
 ASDM 7.4(1)
and later
 FireSIGHT
Manager
5.4.1

14
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 12 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5512-X, ASA FirePOWER software module 6.0.1 ASA 9.6(1)
5515-X,
Requirements: Cisco solid state drive (SSD) Management: ASA 9.4(2) and later
5525-X,
without ASDM
5545-X,  ASDM 7.6(1)
management
5555-X
 Firepower
Management
Center 6.0.1
6.0 ASA 9.5(1.5) and later
Management: ASA 9.4(2) and later
without ASDM
 ASDM
management
7.5(1.112)
and later
 Firepower
Management
Center 6.0
5.4.0.2+ ASA 9.3(2) and later
(5.4.1.x is not
supported)
Management:
FireSIGHT
Manager 5.4.0.2+
5.3.1, 5.4.0.1 (but ASA 9.2(2.4) and later
not 5.4.0.2+)
Management:
FireSIGHT
Manager 5.3.1,
5.4.0.1
ASA CX SSP software module 9.3 ASA 9.1(5) and later
Requirements: Cisco solid state drive (SSD) 9.2 ASA 9.1(3) and later
Note: For ASA Version 9.3(2) and later, only ASA CX 9.1 ASA 9.1(1) and later
Version 9.3.2.1 and later is supported. When
upgrading your ASA, first upgrade the ASA CX
software; otherwise the ASA CX module can
become unresponsive.
ASA IPS SSP software module 7.3 ASA 8.6(1) and later
7.2 ASA 8.6(1) and later
7.1(3) ASA 8.6(1) and later

15
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 12 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5585-X ASA SSP-20 and -60 (See ASA OS) ASA 8.2(3) and later;
8.4(1) and later
ASA modules Requirements: Single ASA SSP in slot 0
ASA SSP-10 and -40 (See ASA OS) ASA 8.2(4) and later;
8.4(1) and later
Requirements: Single ASA SSP in slot 0
Dual ASA SSPs: (See ASA OS) ASA 8.4(2) and later
 Dual ASA SSP-40s
 Dual ASA SSP-60s
Requirements: Matching-level for both SSPs
Dual ASA SSPs: (See ASA OS) ASA 9.0(1) and later
 Dual ASA SSP-10s
 Dual ASA SSP-20s
Requirements: Matching-level for both SSPs
ASA 5585-X  ASA 4-port 10G Network Module N/A ASA 8.4(4.1) and later;
9.1(2)
Network  ASA 8-port 10G Network Module
modules
 ASA 20-port 1G Network Module
Requirements: Install one or two network modules in
slot 1, with ASA SSP in slot 0

16
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 12 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5585-X Same level SSPs 6.0.1 ASA 9.6(1)
ASA FirePOWER ASA FirePOWER SSP -10, -20, -40, and -60 Management: ASA 9.4(2) and later
modules without ASDM
Requirements: Install in slot 1, with matching-level  ASDM 7.6(1)
management
ASA SSP in slot 0
 Firepower
Mixed level SSPs Management
Center 6.0.1
Support for the following combinations starts with
version 5.4.0.1. 6.0 ASA 9.5(1.5) and later

 ASA SSP-10/ASA FirePOWER SSP-40 Management: ASA 9.4(2) and later

without ASDM
 ASA SSP-20/ASA FirePOWER SSP-60  ASDM
management
7.5(1.112)
 ASA SSP-40/ASA FirePOWER SSP-60 and later
Requirements: ASA SSP in slot 0, ASA FirePOWER  Firepower
SSP in slot 1 Management
Note: For the SSP40/60 combination, you might see Center 6.0
an error message that this combination is not 5.4.0.2+ ASA 9.3(2) and later
supported. You can ignore the message.
(5.4.1.x is not
supported)
Management:
FireSIGHT
Manager 5.4.0.2+
5.3.1, 5.4.0.1 (but ASA 9.2(2.4) and later
not 5.4.0.2+)
Management:
FireSIGHT
Manager 5.3.1,
5.4.0.1

17
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 12 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5585-X ASA CX SSP-10 and -20 9.3 ASA 9.1(5) and later
Legacy modules Requirements: Install in slot 1, with matching-level 9.2 ASA 9.1(3) and later
ASA SSP in slot 0 9.1 ASA 9.1(1) and later
Note: For ASA Version 9.3(2) and later, only ASA CX 9.0 ASA 8.4(4.1) and later
Version 9.3.2.1 and later is supported. When
upgrading your ASA, first upgrade the ASA CX
software; otherwise the ASA CX module can
become unresponsive.
ASA CX SSP-40 and -60 9.3 ASA 9.1(5) and later
Requirements: Install in slot 1, with matching-level 9.2 ASA 9.1(3) and later
ASA SSP in slot 0
Note: For ASA Version 9.3(2) and later, only ASA CX
Version 9.3.2.1 and later is supported. When
upgrading your ASA, first upgrade the ASA CX
software; otherwise the ASA CX module can
become unresponsive.
ASA IPS SSP-10, -20, -40, and -60 7.3 ASA 8.2(5) and later;
8.4(2) and later
Requirements: Install in slot 1, with matching-level
ASA SSP in slot 0 7.2 ASA 8.2(5) and later;
8.4(2) and later
7.1 ASA 8.2(5) and later;
8.4(2) and later
ISA 3000 ASA FirePOWER software module 5.4.1.6 ASA 9.6(1)
Management:
 ASDM 7.6(1)
and later
 FireSIGHT
Manager
5.4.1.6
5.4.1 ASA 9.4(1.225), 9.5(2)
Management:
 ASDM 7.5(1)
and later
 FireSIGHT
Manager
5.4.1

Legacy Models
The following table shows the modules supported on each ASA model. To see the ASDM versions supported for
each ASA version on your model, see ASA and ASDM Compatibility, page 1.
Note: For the IPS module, ASDM 7.1(6) and later are not compatible with IDM. To manage an IPS module on an
ASA, you must connect to the IPS IP address directly through your browser or in the ASDM-IDM Launcher.

18
Cisco ASA Compatibility

ASA 5500 and Module Compatibility

Table 13 ASA Module Compatibility

ASA Model Modules Supported Module OS ASA OS
ASA 5510 ASA AIP SSM-10 7.1 ASA 8.0(2) and later
(ASDM 5.2 and later lets you launch IDM from ASDM 7.0 ASA 8.0(2) and later
to manage IPS release 5.0 and 5.1. For 6.2 ASA 8.0(2) and later
natively-integrated management, use IPS 6.0 and
later.) 6.1 ASA 8.0(2) and later
6.0 ASA 7.2(1) and later
5.1 ASA 7.0(1) and later
5.0 ASA 7.0(1) and later
ASA Content Security and Control (CSC) SSM-10 6.6 ASA 8.4(2) and later.
and -20 Versions earlier than 8.4.2 are
supported; however, HTTPS
(ASDM 5.2 and above lets you launch Trend Micro
filtering is not possible.
Content Security from ASDM to manage CSC 6.0,
6.1, and 6.2. For natively-integrated management, 6.3 ASA 7.1(1) and later
use CSC 6.3 and above with ASDM 6.2(3) and 6.2 ASA 7.1(1) and later
above.)
6.1 ASA 7.1(1) and later
6.0 ASA 7.1(1)
ASA 4GE SSM N/A ASA 7.0(4) and later
ASA 5520 ASA AIP SSM-10 and -20 7.1 ASA 8.0(2) and later
7.0 ASA 8.0(2) and later
6.2 ASA 8.0(2) and later
6.1 ASA 8.0(2) and later
6.0 ASA 7.2(1) and later
5.1 ASA 7.0(1) and later
5.0 ASA 7.0(1) and later
ASA AIP SSM-40 7.1 ASA 8.0(4) and later
7.0 ASA 8.0(4) and later
6.2 ASA 8.0(4) and later
6.1 ASA 8.0(4) and later
6.0(4) ASA 8.0(4) and later
ASA CSC SSM-10 and -20 6.6 ASA 8.4(2) and later.
Versions earlier than 8.4(2) are
supported; however, HTTPS
filtering is not possible.
6.3 ASA 7.2(1) and later
6.2 ASA 7.2(1) and later
6.1 ASA 7.1(2) and later
6.0 ASA 7.1(1)
ASA 4GE SSM N/A ASA 7.0(4) and later

19
Cisco ASA Compatibility

ASA Clustering External Hardware Support

Table 13 ASA Module Compatibility (continued)

ASA Model Modules Supported Module OS ASA OS
ASA 5540 ASA AIP SSM-20 7.1 ASA 8.0(2) and later
7.0 ASA 8.0(2) and later
6.2 ASA 8.0(2) and later
6.1 ASA 8.0(2) and later
6.0 ASA 7.2(1) and later
5.1 ASA 7.0(1) and later
5.0 ASA 7.0(1) and later
ASA AIP SSM-40 7.1 ASA 8.0(4) and later
7.0 ASA 8.0(4) and later
6.2 ASA 8.0(4) and later
6.1 ASA 8.0(4) and later
6.0(4) ASA 8.0(4) and later
ASA CSC SSM-10 and -20 6.6 ASA 8.4(2) and later.
Versions earlier than 8.4(2) are
supported; however, HTTPS
filtering is not possible.
6.3 ASA 7.2(1) and later
6.2 ASA 7.2(1) and later
6.1 ASA 7.1(2) and later
6.0 ASA 7.1(1)
ASA 4GE SSM N/A ASA 7.0(4) and later
ASA 5550 No support (the ASA 4GE SSM is built-in and not N/A N/A
user-removable)
ASA 5580 No support N/A N/A

ASA Clustering External Hardware Support

The following table lists supported external hardware and software to interoperate with ASA clustering.
Note: For the Firepower 9300 ASA cluster, intra-chassis clustering can operate with any switch because
Firepower 9300-to-switch connections use standard interface types.

External Hardware External Software ASA Version

Cisco ASR 9000 with RSP 440 Cisco IOS XR 5.3(1) and later 9.5(1) and later
Cisco Nexus 9500 Cisco NX-OS 6.1(2)I2(1) and later 9.2(1) and later
APIC 1.0(1) and later
Cisco Nexus 9300 Cisco NX-OS 6.1(2)I2(1) and later 9.2(1) and later
APIC 1.0(1) and later

20
Cisco ASA Compatibility

ASA and Cisco Application Policy Infrastructure Controller (APIC) Compatibility

External Hardware External Software ASA Version

Cisco Nexus 7000 Cisco NX-OS 5.2(5) and later 9.0(1) and later
Note: You can use F1-series line cards for the
cluster control link, but we do not recommend using
them for data EtherChannels in Spanned
EtherChannel mode due to asymmetric
load-balancing, which can cause performance
degradation for data throughput on the cluster.
Cisco Nexus 6000 Cisco NX-OS 7.0(2)N1(1) and later 9.3(2) and later
Cisco Nexus 5000 Cisco NX-OS 7.0(1) and later 9.1(4) and later
Catalyst 6800 with Supervisor 2T Cisco IOS 15.1(2)SY5 and later 9.1(5) and later
Catalyst 6500 with Supervisor 32, 720, and Cisco IOS 12.2(33)SXI7, SXI8, and SXI9 and 9.0(1) and later
720-10GE later
Catalyst 6500 with Supervisor 2T Cisco IOS 15.1(2)SY5 and later 9.1(5) and later
Catalyst 4500-X Cisco IOS 3.6(3) and later 9.5(2) and later
Note: We do not recommend using this switch for
data EtherChannels in Spanned EtherChannel mode
due to asymmetric load-balancing, which can cause
performance degradation for data throughput on the
cluster. You can use the switch for the cluster control
link or for interfaces in Individual Interface mode.
Catalyst 4500 with Supervisor 8-E Cisco IOS XE 3.7(1E) and later 9.5(1) and later
Catalyst 3850 Cisco IOS 3.7(3) and later 9.5(2) and later
Note: We do not recommend using this switch for
data EtherChannels in Spanned EtherChannel mode
due to asymmetric load-balancing, which can cause
performance degradation for data throughput on the
cluster. You can use the switch for the cluster control
link or for interfaces in Individual Interface mode.
Catalyst 3750-X Cisco IOS 15.0(2) and later 9.1(4) and later

ASA and Cisco Application Policy Infrastructure Controller

(APIC) Compatibility
The following table lists the supported ASA models, ASA software, and APIC versions.

ASA Models ASA Version ASA Device Package Version APIC Version
ASA 5512-X, 5515-X, 5525-X, 5545-X, 8.4(1) and later 1.2(1.2) and later 1.0(1g) and later
5555-X
ASA 5585-X 8.4(1) and later 1.2(1.2) and later 1.0(1g) and later
ASAv 9.2(1) and later 1.2(1.2) and later 1.0(1g) and later

Note: If you are running an earlier version of the ASA device package or APIC, for best stability we recommend
that you upgrade to the minimum versions in the above table.

21
Cisco ASA Compatibility

ASA 1000V Compatibility

ASA 1000V Compatibility

The following table lists the supported hardware and software for each ASA 1000V release.

Table 14 ASA 1000V Compatibility

ASA 1000V OS ASDM Nexus 1000V OS, VNMC VMware vCenter VMware vCenter
with VSM and VEM VSphere Hypervisor, Server and vSphere Client,
Enterprise Plus Enterprise Plus
ASA 8.7(1.1) ASDM 6.7(1) Nexus VNMC 4.1, 5.0 4.1, 5.0
4.2(1)SV1(5.2) 2.0

ASA Memory Information

The ASA includes DRAM (also referred to as DIMM) and internal flash memory. On some models, you can
optionally use an external flash memory as well. This section includes the following topics:
 Memory Requirements, page 22
 Viewing Flash Memory, page 24
 DRAM, Flash Memory, and Failover or ASA Clustering, page 25

Memory Requirements
The following sections list the standard and recommended flash memory and DRAM.

Current Models
 Shipping Memory, page 22
 Memory Kits, page 23

Shipping Memory
See the following guidelines:
 The ASA 5500-X models can run a software module such as the ASA IPS or ASA CX alongside the ASA
firewall and VPN functions. For these models, DRAM is evenly and statically distributed between the
Firewall/VPN functionality and the software module functionality, with 50% allocated to each. Memory for the
software module is reserved even if you are not running a software module; you cannot use that memory for
firewall and VPN functions. For other models with hardware modules, such as the ASA 5585-X, the modules
include their own memory, so all of the ASA memory is used for firewall and VPN.
 For the ASA 5505 with Version 8.3 through 9.1, only the Unlimited Hosts license and the Security Plus license
with failover enabled require 512 MB; other licenses can use 256 MB. For Version 9.2 and later, all ASA 5505
licenses require 512 MB.

22
Cisco ASA Compatibility

ASA Memory Information

Table 15 Standard Memory and Memory Requirements for the Cisco ASA Series Current Models
ASA Model Internal Flash Total DRAM DRAM Allocated DRAM
Memory (Default Shipping) to FW/VPN Allocated
(Default Shipping) to Module
5505 128 MB Before Feb. 2010: 256 MB 512 MB On module
After Feb. 2010: 512 MB
5506-X, 5506H-X, 8 GB 4 GB 1.8 GB 2.2 GB
5506W-X
5508-X 8 GB 8 GB 4 GB 4 GB
5512-X 4 GB 4 GB 2 GB 2 GB
5515-X 8 GB 8 GB 4 GB 4 GB
5516-X 8 GB 8 GB 4 GB 4 GB
5525-X 8 GB 8 GB 4 GB 4 GB
5545-X 8 GB 12 GB 6 GB 6 GB
5555-X 8 GB 16 GB 8 GB 8 GB
5585-X with SSP-10 2 GB 6 GB 6 GB On module
5585-X with SSP-20 2 GB 12 GB 12 GB On module
5585-X with SSP-40 2 GB 12 GB 12 GB On module
5585-X with SSP-60 2 GB 24 GB 24 GB On module
ASASM 8 GB 24 GB 24 GB N/A

Memory Kits
The following table lists the DRAM (also referred to as DIMM) kits.

Table 16 DRAM Kits

Model Size Part Number
ASA 5505 512 MB ASA5505-MEM-512=

Legacy Models
 Shipping Memory, page 23
 Memory Kits, page 24

Shipping Memory
See the following guidelines:
 Note that the shipping DRAM increased after February 2010; the DRAM requirements for 8.3 and higher match
the newer default shipping sizes. The newer default shipping DRAM is the current maximum DRAM you can
install in your unit. See Memory Kits, page 24 to order an upgrade kit.
 ASA 5520s and ASA 5540s manufactured before August 2011 have four DIMM sockets. ASA 5520s and ASA
5540s manufactured after this date have two DIMM sockets. All ASA 5550s have four DIMM sockets.

23
Cisco ASA Compatibility

ASA Memory Information

 For the ASA 5510 through 5550, you might need to upgrade the internal flash memory to 512 MB or add
external flash memory if you load multiple images of the AnyConnect client along with one or more images of
the ASA software, ASDM, client/server plugins, or Cisco Secure Desktop. In particular, you might need to
upgrade for multiple AnyConnect 3.0 and higher clients with optional modules.
 The default internal flash memory for some models was 64 MB in the past; if you have one of these early units,
we recommend upgrading your flash memory to at least the new shipping default.

Table 17 Standard Memory and Memory Requirements for the Cisco ASA Series Legacy Models
ASA Model Internal Flash Total DRAM (Default Shipping) DRAM Allocated DRAM
Memory Before After Feb. 2010 (Req’d to FW/VPN Allocated to
(Default Shipping) Feb. 2010 for 8.3 and Higher) Module

5510 256 MB 256 MB 1 GB 1 GB On module

5520 256 MB 512 MB 2 GB 2 GB On module
5540 256 MB 1 GB 2 GB 2 GB On module
5550 256 MB 4 GB 4 GB 4 GB On module
5580-20 1 GB 8 GB 8 GB 8 GB N/A
5580-40 1 GB 12 GB 12 GB 12 GB N/A

Memory Kits
The following table lists the DRAM (also referred to as DIMM) kits.

Table 18 DRAM Kits

Model Size Part Number
ASA 5510 1 GB ASA5510-MEM-1GB=
(If you previously purchased the 512 MB upgrade kit for the ASA 5510
(ASA5510-MEM-512=), you must upgrade to the 1 GB memory
upgrade kit to run Version 8.3.)
ASA 5520 2 GB ASA5520-MEM-2GB=
ASA 5540 2 GB ASA5540-MEM-2GB=
ASA 5550 4 GB 2 x ASA5540-MEM-2GB=

The following table lists the CompactFlash upgrade kits available for the ASA 5510 through ASA 5550, for use as
internal or external flash memory.

Table 19 CompactFlash Upgrade Kits

Model Size Part Number
ASA 5510 through ASA 5550 256 MB ASA5500-CF-256MB=
ASA 5510 through ASA 5550 512 MB ASA5500-CF-512MB=

Viewing Flash Memory

You can check the size of internal flash and the amount of free flash memory on the ASA by doing the following:
 ASDM—Choose Tools > File Management. The amounts of total and available flash memory appear on the
bottom left in the pane.

24
Cisco ASA Compatibility

ASA Memory Information

 CLI—In Privileged EXEC mode, enter the dir command. The amounts of total and available flash memory appear
on the bottom of the output.
Example:
hostname # dir
Directory of disk0:/

43 -rwx 14358528 08:46:02 Feb 19 2007 cdisk.bin

136 -rwx 12456368 10:25:08 Feb 20 2007 asdmfile
58 -rwx 6342320 08:44:54 Feb 19 2007 asdm-600110.bin
61 -rwx 416354 11:50:58 Feb 07 2007 sslclient-win-1.1.3.173.pkg
62 -rwx 23689 08:48:04 Jan 30 2007 asa1_backup.cfg
66 -rwx 425 11:45:52 Dec 05 2006 anyconnect
70 -rwx 774 05:57:48 Nov 22 2006 cvcprofile.xml
71 -rwx 338 15:48:40 Nov 29 2006 tmpAsdmCustomization430406526
72 -rwx 32 09:35:40 Dec 08 2006 LOCAL-CA-SERVER.ser
73 -rwx 2205678 07:19:22 Jan 05 2007 vpn-win32-Release-2.0.0156-k9.pkg
74 -rwx 3380111 11:39:36 Feb 12 2007 securedesktop_asa_3_2_0_56.pkg

62881792 bytes total (3854336 bytes free)

DRAM, Flash Memory, and Failover or ASA Clustering

In a failover or cluster configuration, the units must have the same amount of DRAM. You do not have to have the
same amount of flash memory. For more information, see the failover or clustering chapters in the configuration
guide.
Note: If you use units with different flash memory sizes, make sure that the units with the smaller flash memory
has enough space for the software images and configuration files.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To
view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other
company. (1110R)
© 2008-2016 Cisco Systems, Inc. All rights reserved.

25
Cisco ASA Compatibility

ASA Memory Information

26