The ASA software has a similar interface to the Cisco IOS software on routers. The names of firmware files includes a version indicator, -smp means it is for a symmetrical multiprocessor (and 64 bit architecture), and different parts also indicate if 3DES or AES is supported or not. The ROMMON also has a command line that can be used to load or select other software images and configurations. In the boot sequence a boot loader called ROMMON (ROM monitor) starts, loads a Linux kernel, which then loads the lina_monitor, which then loads lina. This schedules processes internally rather than using the Linux facilities. It runs a single Executable and Linkable Format program called lina. A code insertion implant called BANANAGLEE, was made persistent by JETPLOW. In 2017 The Shadow Brokers revealed the existence of two privilege escalation exploits against the ASA called EPICBANANA and EXTRABACON. Īnother flaw in a WebVPN feature was fixed in 2018. Ī security flaw was identified when users customized the Clientless SSL VPN option of their ASA's but was rectified in 2015. Early reviews indicated the Cisco GUI tools for managing the device were lacking.

Reception and criticism Ĭisco ASA has become one of the most widely used firewall/VPN solutions for small to medium businesses. The Cisco ASA is a unified threat management device, combining several network security functions in one box. Cisco VPN 3000 Series Concentrators, which provided virtual private networking (VPN).Cisco's IPS 4200 Series worked as intrusion prevention systems (IPS).Cisco PIX, which provided firewall and network address translation (NAT) functions, ended its sale on July 28, 2008.

It succeeded three existing lines of popular Cisco products: In computer networking, Cisco ASA 5500 Series Adaptive Security Appliances, or simply Cisco ASA, is Cisco's line of network security devices introduced in May 2005.

Cisco asa 5505