Cisco Cisco Security Manager 4.0 Information Guide

Cisco ASA-5500 Series Adaptive Security Appliances (ASA)—ASA Software Release 7.0(1-2, 
4-8), 7.1(1-2), 7.2(1-5), 8.0(2-3, 5), 8.1(1-2), 8.2(1-3), 8.3(1-2), 8.4(1-6), 8.5(1), 8.6(1), 9.0(1), 
9.1(1-5), 9.2(1), 9.2(2), 9.2(3), 9.3(1-2), 9.4.1, 9.5.1, 9.5.2, 9.6.1 and 9.6.2. 

The following special cases and exceptions apply to ASA software support:

If you upgrade a device that you are already managing in Security Manager from 8.x to 9.0(1) 
or higher, you must rediscover the device inventory so that Security Manager starts interpreting 
the device as a 9.x device and then you must rediscover the policies on the device to ensure that 
Security Manager looks for and discovers the appropriate policy types. Alternatively, you can 
delete the device from Security Manager and then add the device again.

If you perform one of the following upgrades to a device that you are already managing in 
Security Manager:

—from 7.x to 8.x 

—from any lower version to 8.3(1) or higher

—from 8.3(x) to 8.4(2) or higher

you must rediscover the device in Security Manager. This is required due to significant policy 
changes between the two releases.

For detailed information on these scenarios, refer to the section titled “Validating a Proposed 
Image Update on a Device” in the User Guide for Cisco Security Manager 4.8 at the following 
URL: 

Although 8.2(4) is supported in downward compatibility mode as 8.2(3), Security Manager does 
support ASA 5585-X models with SSP-10 and SSP-40 running 8.2(4).

You cannot use Security Manager to manage SSL VPNs on ASA 7.x.

You cannot use Security Manager to manage an ASA 8.3+ device if you enable password 
encryption using the password encryption aes command. You must turn off password 
encryption before you can add the device to the Security Manager inventory.

Release 8.5(1) applies to the Catalyst 6500 Series ASA Services Module (ASA-SM) only. The 
ASA-SM does not support any type of VPN configuration for this version. However, starting 
from the 9.0(1) version, ASA-SM supports VPN configurations. 

Release 8.6(1) applies to the following Cisco ASA 5500-X based Adaptive Security Appliance 
models only: 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X. 

Security Manager 4.8 supports ASAv’s when you are using ASA 9.2(1) or other versions of 
ASA that support ASAv’s. 

 provides the details of the ASA platforms that are supported and not supported for 

ASA 9.2(1) and above. 

ASA platforms that are supported and not supported for ASA 9.2(1) and above

 9.2(1) 

ASA 5505, 5512-X, 5515-X, 5525-X, 
5545-X, 5555-X, 5585-X; ASASM; 
ASAv

ASA 1000V, 5510, 5520, 5540, 5550, 
5580-20, 5580-40

 9.2(2)

ASA 5505, 5512-X, 5515-X, 5525-X, 
5545-X, 5555-X, 5585-X; ASASM; 
ASAv

ASA 1000V, 5510, 5520, 5540, 5550, 
5580-20, 5580-40