Cisco ASA 5506-X Manual

Cisco ASA 5506-X Hardware Installation Guide
First Published: 0,
Last Modified: 0,
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: Online Only

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2015 Cisco Systems, Inc. All rights reserved.

CONTENTS
CHAPTER 1 About the ASA 5506-X 1
Package Contents 2
Front Panel 2
Rear Panel 2
Status Lights 4
Network Ports 5
Console Ports 5
Internal and External Flash Storage 6
Solid State Drive 7
Power Supply 7
Hardware Specifications 7
CHAPTER 2 Prepare for Installation 9
Installation Warnings 9
Position the ASA 10
Safety Recommendations 11
Maintain Safety with Electricity 11
Prevent Electrostatic Discharge Damage 12
Site Environment 12
Site Considerations 12
Power Supply Considerations 13
Equipment Rack Configuration 13
CHAPTER 3 Mount and Connect the ASA 15
Mount the ASA 15
Desktop Mount the ASA 15
Wall Mount the ASA 15
Rack Mount the ASA 17
Cisco ASA 5506-X Hardware Installation Guide
Online Only iii

Connect Cables, Turn on Power, and Verify Connectivity 18
Connect to a Console Terminal or PC 19
Connect to the Console Port with Microsoft Windows 19
Connect to the Console Port with Mac OS X 21
Connect to the Console Port with Linux 21
Cisco ASA 5506-X Hardware Installation Guide
iv Online Only
Contents

CHAPTER 1
About the ASA 5506-X
The Cisco ASA 5506-X adaptive security appliance is part of the ASA 5500-X of next-generation mid-range
ASAs and is built on the same security platform as the rest of the ASA family.
This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper
web inspection and flow-specific analysis, improved secure connectivity via end-point security posture
validation, and voice and video over VPN support. It also provides enhanced support for intelligent information
networks through improved network integration, resiliency, and scalability.
This ASA is a smaller form-factor chassis, intended primarily for desktop or wall-mounting, although one
or two can be mounted in a single rack shelf. The ASA has a standard 1 RU chassis. See http://www.cisco.com/
c/en/us/products/security/asa-5500-series-next-generation-firewalls/index.html to compare the performance
metrics and capabilities of the 5500-X ASAs.
Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance
and Safety Information for the Cisco ASA 5506-X appliances (found at http://www.cisco.com/go/
asa5506x-compliance) and follow proper safety procedures.
Note
•Package Contents, page 2
•Front Panel, page 2
•Rear Panel, page 2
•Status Lights, page 4
•Network Ports, page 5
•Console Ports, page 5
•Internal and External Flash Storage, page 6
•Solid State Drive, page 7
•Power Supply, page 7
•Hardware Specifications, page 7
Cisco ASA 5506-X Hardware Installation Guide
Online Only 1

Package Contents
This section lists the package contents for the ASA. Note that the contents are subject to change and your
exact contents might contain additional or fewer items.
Blue Console Cable PC Terminal Adapter2Chassis1
Brick power supply4Power cord3
Front Panel
The following figure shows the front panel. Note that there are no connectors or LEDs on the front panel.
Rear Panel
The following figure shows the rear panel.
Cisco ASA 5506-X Hardware Installation Guide
2Online Only
About the ASA 5506-X
Package Contents

DescriptionLED
The locations and meanings of the status LEDs are described in Status Lights,
on page 4.
Status LEDs1
The chassis power-supply socket. See Power Supply, on page 7 for more
information about the chassis power supply. (The ASA is powered on when
you plug in the DC power supply.)
Power cord socket2
Eight Gigabit Ethernet RJ-45 (8P8C) network I/O interfaces. The ports are
numbered (from left to right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair of
LEDs, one each for connection status and link status. The ports are named and
numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/8. See Network
Ports, on page 5 for additional information.
Network data ports3
A Gigabit Ethernet interface restricted to network management access only.
Connect with an RJ-45 cable.
Management port4
Two serial ports, a mini USB Type B, and a standard RJ-45 (8P8C), are provided
for management access via an external system. See Console Ports, on page
5for additional information.
Console ports5
A standard USB Type A port is provided that allows the attachment of an
external device, such as mass storage. See Internal and External Flash Storage,
on page 6 for additional information.
USB port6
A small recessed button that if pressed for longer than three seconds resets the
ASA to its default “as-shipped”state following the next reboot. Configuration
variables are reset to factory default. However, the flash is not erased and no
files are removed.
You can use the service sw-reset-button to disable the reset button.
The default is enabled.
Note
Reset button7
The slot accepts a standard Kensington T-bar locking mechanism for securing
the ASA.
Lock slot8
Cisco ASA 5506-X Hardware Installation Guide
Online Only 3
About the ASA 5506-X
Rear Panel

Status Lights
Facing the rear of the chassis, the status lights are located on the top left edge (facing the front of the chassis,
they are in the back right corner of the top). The network port lights are at the top sides of each network port.
The following figure shows the lights on the top left edge.
DescriptionLED
Power supply status:
•Unlit –Power supply off.
•Solid green –Power supply on.
See Power Supply, on page 7 for additional power information specific to
your specific ASA.
Power1
System operating status:
•Green –Normal system function.
•Amber –Critical alarm indicating one or more of the following:
•Major failure of a hardware or software component.
•Over-temperature condition.
•Power voltage outside the tolerance range.
Status2
Cisco ASA 5506-X Hardware Installation Guide
4Online Only
About the ASA 5506-X
Status Lights

DescriptionLED
Status of the failover pair:
•Solid green –Failover pair operating normally. The LED is green always
unless the ASA in an HA pair.
•Amber –When the ASA is in an HA pair, the LED is amber for the
Standby unit.
•Unlit –Failover is not operational.
Active3
Not in use on the ASA 5506-X.Wireless3
On the rear panel, a pair of LEDs (Link status and connection Status) for each
of the eight Gigabit Ethernet network ports, and the Gigabit Ethernet
Management port.
Link status (L):
•Unlit –No link, or port is not in use.
•Solid green –Link established.
•Flashing green –Link activity.
Connection-speed status (S):
•One blink every three seconds –10 Mbps.
•Two rapid blinks –100 Mbps.
•Three rapid blinks –1000 Mbps.
Network port status4
Network Ports
There are eight 10/100/1000 baseT Ethernet network ports on the ASA 5506-X. Each RJ-45 (8P8C) copper
port supports auto MDI/X as well as auto-negotiation for interface speed, duplex, and other negotiated
parameters, and are MDI/MDIX compliant.
Looking at the rear of the ASA, where the ports are located, port 1 is on the left, and port 8 is on the right,
next to the console and management ports. Each port is accompanied by a pair of LEDs, one each for link
status (L) and connection status (S). The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit
Ethernet 1/8.
Console Ports
The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one
console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port
becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes
active. The console ports do not have any hardware flow control. You can use the command-line interface
Cisco ASA 5506-X Hardware Installation Guide
Online Only 5
About the ASA 5506-X
Network Ports

(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal
emulation program on a computer.
See Connect to a Console Terminal or PC, on page 19 for the procedure to install a console terminal.
RJ-45 Port
The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco part
number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
Mini USB Type B Port
The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and
Macintosh systems, no special driver is required. For Windows systems, you must download and install
a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the
console port without affecting Windows HyperTerminal operations. We recommend shielded USB
cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800,
9600, 19200, 38400, 57600, and 115200 bps.
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC
connected to the console port before using the USB console port. See Connect to the Console Port with
Microsoft Windows, on page 19 for information on installing the driver.
Note
Internal and External Flash Storage
The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach
an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB
power units).
Internal USB Device
An embedded eUSB device is used as the internal flash; it is identified as disk0.
External USB Drive (Optional)
You can use the external Type A USB port to attach a data-storage device. The external USB drive
identifier is disk1. When the ASA is powered on, a connected USB drive is mounted as disk1 and is
available for you to use. Additionally, the file-system commands that are available to disk0 are also
available to disk1, including copy,format,delete,mkdir,pwd,cd, and so on.
If you insert a USB drive with more than one partition, only the first partition is mounted.
FAT-32 File System
The ASA only supports FAT-32-formatted file systems for the internal eUSB and external USB drives.
If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails,
and you receive an error message. You can enter the command format disk1: to format the partition
to FAT-32 and mount the partition to disk1 again; however, data might be lost.
Cisco ASA 5506-X Hardware Installation Guide
6Online Only
About the ASA 5506-X
Internal and External Flash Storage

Solid State Drive
The ASA 5506-X ships with an SSD installed that provides storage support. The SSD has 50 GB of useable
space and is not field-replaceable. You must return the entire ASA to Cisco for drive replacement. The SSD
is used by the software; there is no user access to the SSD.
Power Supply
The ASA 5506-X ships with a 12-V brick power supply that provides 60 W. See Power Supply Considerations,
on page 13 for additional site-related power information.
Hardware Specifications
The following table contains hardware specifications for the ASA.
Physical Specifications
Desk mountable; see Desktop Mount the ASA, on page 15 for more information.
Rack mountable in a rack tray. You can place two chassis side by side. See Rack
Mount the ASA, on page 17 for more information.
Wall mountable; see Wall Mount the ASA, on page 15 for more information.
Mounting
7.87 x 9.23 x 1.94 in (19.99 x 23.44 x 4.93 cm) including the feet.Dimensions
4 lbWeight
Memory
Total: 4 GB
Allotted to FW/VPN: 1.8 GB
Allotted to Module: 2.2 GB
DRAM
Total: 8 GBInternal Flash
60 WPower
Environment
Operating: 0°C to 40°C (32°F to 104°F)1
Nonoperating: -25°C to 70°C (-13°F to 158°F)
Temperature
Operating: 90%
Nonoperating: 10% to 90%
Relative humidity
Cisco ASA 5506-X Hardware Installation Guide
Online Only 7
About the ASA 5506-X
Solid State Drive

Operating: 3048 m (10,000 ft)
Nonoperating: 4572 m (15,000 ft)
Maximum altitude
1Derate the maximum operating temperature 1.5 degrees C per 1000 ft above sea level.
Cisco ASA 5506-X Hardware Installation Guide
8Online Only
About the ASA 5506-X
Hardware Specifications

CHAPTER 2
Prepare for Installation
This chapter prepares you to install your ASA, and contains the following topics:
•Installation Warnings, page 9
•Position the ASA, page 10
•Safety Recommendations, page 11
•Site Environment , page 12
Installation Warnings
Be sure to read the Regulatory Compliance and Safety Information document (http://www.cisco.com/go/
asa5506x-compliance) before installing the ASA.
Take note of the following warnings:
Installation Instructions Warning
Read all installation instructions before connecting the system to a power source. (Statement 1004)
Power Supply Disconnection Warning
Before working on a chassis or working near power supplies, unplug the power cord on AC units; disconnect
the power at the circuit breaker on DC units. (Statement 12)
Jewelry Removal Warning
Before working on equipment that is connected to a power source, remove jewelry (including rings, necklaces,
and watches). Metal objects will heat when connected to power and ground, and can cause serious burns or
weld the metal object to the terminals. (Statement 43)
Wrist Strap Warning
During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly touch
the backplane with your hand or any metal tool, or you could receive a shock. (Statement 94)
Work During Lightning Warning
Do not work on the system, or connect or disconnect cables during periods of lightning. (Statement 1001)
Short-Circuit Protection Warning
Cisco ASA 5506-X Hardware Installation Guide
Online Only 9

This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation.
Install only in accordance with national and local wiring regulations. (Statement 1045)
Short-Circuit Protection Warning
This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation.
Install only in accordance with national and local wiring regulations. (Statement 1045)
SELV Circuit Warning
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage
(TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and
WAN ports both use RJ-45 connectors. Use caution when connecting cables. (Statement 1021)
Ground Conductor Warning
This equipment must be grounded. Never defeat the ground conductor, or operate the equipment in the absence
of a suitably installed ground conductor. Contact the appropriate electrical inspection authority, or an electrician
if you are not certain that suitable grounding is available. (Statement 1024)
Product Disposal Warning
Ultimate disposal of this product should be handled according to all national laws and regulations. (Statement
1040)
Compliance with Local and National Electrical Codes Warning
Installation of the equipment must comply with local and national electrical codes. (Statement 1074)
TN Power Warning
The device is designed to work with TN power systems. (Statement 19)
Circuit Breaker (15A) Warning
This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that a fuse
or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10A international) is used on the phase
conductors (all current-carrying conductors). (Statement 13)
Grounded Equipment Warning
This equipment is intended to be grounded. Ensure that the host is connected to earth ground during normal
use. (Statement 39)
Safety Cover Requirement
The safety cover is an integral part of the product. Do not operate the unit without the safety cover installed.
Operating the unit without the cover in place will invalidate the safety approvals and pose a risk of fire and
electrical hazards. (Statement 117)
Position the ASA
Whether positioning the ASA on a desktop, on a non-rack closet shelf, or mounting it on a wall, consider the
following:
•Be sure to choose an area where the ASA is out of the way to make sure it is not bumped or accidentally
dislodged. The appliance has “feet”on the bottom so it does not sit flush where placed, thus allowing
proper air circulation through and around it. Make sure that the appliance is not tightly enclosed or
crowded by other objects that might impede proper circulation.
Cisco ASA 5506-X Hardware Installation Guide
10 Online Only
Prepare for Installation
Position the ASA

•Choose a location that lets you easily bring the power cord and Ethernet and console cables to the ASA,
with plenty of slack and yet tucked away, so they cannot be inadvertently unplugged.
Safety Recommendations
Use the information in the following sections to help ensure your safety and to protect the ASA. This
information may not address all potentially hazardous situations in your working environment, so be alert and
exercise good judgment at all times.
Observe these safety guidelines:
•Keep the area clear and dust-free before, during, and after installation.
•Keep tools away from walkways, where you and others might trip over them.
•Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in the
chassis.
•Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.
•Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.
•Never attempt to lift an object that is too heavy for one person.
Maintain Safety with Electricity
Before working on a chassis, be sure the power cord is unplugged.
Follow these guidelines when working on equipment powered by electricity:
•Before beginning procedures that require access to the interior of the chassis, locate the emergency
power-off switch for the room in which you are working. Then, if an electrical accident occurs, you can
act quickly to turn off the power.
•Do not work alone if potentially hazardous conditions exist anywhere in your work space.
•Never assume that power is disconnected; always check.
•Look carefully for possible hazards in your work area, such as moist floors, ungrounded power extension
cables, frayed power cords, and missing safety grounds.
•If an electrical accident occurs:
◦Use caution; do not become a victim yourself.
◦Disconnect power from the system.
◦If possible, send another person to get medical aid. Otherwise, assess the condition of the victim,
and then call for help.
◦Determine whether the person needs rescue breathing or external cardiac compressions; then take
appropriate action.
•Use the ASA within its marked electrical ratings and product usage instructions.
Cisco ASA 5506-X Hardware Installation Guide
Online Only 11
Prepare for Installation
Safety Recommendations

•Install the ASA in compliance with local and national electrical codes as listed in the Regulatory
Compliance and Safety Information document (see http://www.cisco.com/go/asa5506x-compliance).
Prevent Electrostatic Discharge Damage
Electrostatic discharge (ESD) occurs when electronic components are improperly handled, and it can damage
equipment and impair electrical circuitry, resulting in intermittent or complete failure.
Always follow ESD-prevention procedures when removing and replacing components. Ensure that the chassis
is electrically connected to an earth ground. Wear an ESD-preventive wrist strap, ensuring that it makes good
skin contact. Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD
voltages. To properly guard against ESD damage and shocks, the wrist strap and cord must operate effectively.
If no wrist strap is available, ground yourself by touching the metal part of the chassis.
For safety, periodically check the resistance value of the anti-static strap, which should be between one and
10 megohms.
Site Environment
You can place the chassis on a desktop, mount it on a wall, or on a rack shelf. The location of the chassis and
the layout of the equipment rack or wiring room are extremely important for proper system operation. Placing
equipment too close together with inadequate ventilation and inaccessible panels can cause system malfunctions
and shutdowns. Improper placement can also make it difficult for you to access the chassis for maintenance.
Under no circumstances should you stack more than one chassis on top of one another. This disrupts
cooling air flow to the ASAs and causes damage to the hardware.
Warning
See Hardware Specifications, on page 7 for information about physical specifications.
When planning the site layout and equipment locations, consider the information in the next section to help
avoid equipment failures and reduce the possibility of environmentally caused shutdowns. If you are currently
experiencing shutdowns or unusually high error rates with your existing equipment, these considerations may
help you isolate the cause of failures and prevent future problems.
Site Considerations
Considering the following helps you plan an acceptable operating environment for the chassis, and avoid
environmentally caused equipment failures.
•Electrical equipment generates heat. Ambient air temperature might not be adequate to cool equipment
to acceptable operating temperatures without adequate circulation. Ensure that the room in which you
operate your system has adequate air circulation.
•Ensure that the chassis cover is secure. The chassis is designed to allow cooling air to flow effectively
within it. An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from
the internal components.
•Always follow the ESD-prevention procedures described previously to avoid damage to equipment.
Damage from static discharge can cause immediate or intermittent equipment failure.
Cisco ASA 5506-X Hardware Installation Guide
12 Online Only
Prepare for Installation
Prevent Electrostatic Discharge Damage

Power Supply Considerations
When installing the ASA, consider the following:
•Check the power at the site before installing the chassis to ensure that it is “clean”(free of spikes and
noise). Install a power conditioner, if necessary, to ensure proper voltages and power levels in the
appliance-input voltage.
•Install proper grounding for the site to avoid damage from lightning and power surges.
•The ASA chassis does not have a user-selectable operating range. Refer to the label on the chassis for
the correct appliance input-power requirement.
•Install an uninterruptible power source for your site, if possible.
Equipment Rack Configuration
Consider the following when planning an equipment-rack configuration:
•If you are mounting a chassis in an open rack, make sure that the rack frame does not block the intake
or exhaust ports.
•Be sure enclosed racks have adequate ventilation. Make sure that the rack is not overly congested as
each chassis generates heat. An enclosed rack should have louvered sides and a fan to provide cooling
air.
•In an enclosed rack with a ventilation fan in the top, heat generated by equipment near the bottom of
the rack can be drawn upward and into the intake ports of the equipment above it in the rack. Ensure
that you provide adequate ventilation for equipment at the bottom of the rack.
•Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the
chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with
different arrangements to position the baffles effectively.
Cisco ASA 5506-X Hardware Installation Guide
Online Only 13
Prepare for Installation
Power Supply Considerations

Cisco ASA 5506-X Hardware Installation Guide
14 Online Only
Prepare for Installation
Equipment Rack Configuration

CHAPTER 3
Mount and Connect the ASA
This section describes positioning or mounting the ASA, and connecting its cords and cables. It contains the
following sections:
•Mount the ASA, page 15
•Connect Cables, Turn on Power, and Verify Connectivity, page 18
•Connect to a Console Terminal or PC, page 19
Mount the ASA
This section describes how to mount the ASA, and contains the following topics:
Do not remove the rubber feet included with the ASA because they are needed for proper cooling for all
mounting orientations.
Note
Desktop Mount the ASA
You can mount the ASA on a desktop by placing it on a desk in a horizontal position. Make sure there are no
blockages or obstructions within one inch of the top of the ASA or within .5 inch of the sides and back, so
that nothing interferes with cooling. Do not remove the rubber feet included with the ASA. They are also
needed for proper cooling.
Wall Mount the ASA
Follow these steps to mount your ASA on a wall.
Step 1 Choose a location on the desired wall for the ASA.
Step 2 Use the two Cisco-provided screws and anchors.
Cisco ASA 5506-X Hardware Installation Guide
Online Only 15

If you are mounting the ASA onto something other than drywall, such as wood or sheet metal, anchors may not be
required.
Step 3 Use a pencil, ruler and level to mark locations for the two mounting screws.
The width and length of the ASA are 7.87 x 9.23 inches ( 20 x 23.44 cm). The mounting holes in the chassis are in the
middle length-wise (that is, 6.372 inches from front and back), while the holes are inset from the opposite edges 0.75
inches (1.9 cm).
Thus, you need to make two level marks 6.37, or approximately 6-3/8, inches (16.18 cm) apart.
Step 4 Drill a hole into the wall at each mark.
These holes should be slightly smaller in diameter than your anchors.
Step 5 Insert the anchors into the holes and be sure they are properly seated.
Step 6 Fasten each screw into its anchor until it protrudes about 3/8 inch (0.95 cm).
Step 7 Pick up the ASA, align the screws in the anchors with the holes in the bottom of the chassis, move the ASA toward the
wall until the screw heads are in the chassis, and then slide the ASA down until it rests on the screws.
You can only mount the chassis with the front panel oriented toward either the ceiling or the floor. Wall mounting in
other orientation is not supported.
Cisco ASA 5506-X Hardware Installation Guide
16 Online Only
Mount and Connect the ASA
Wall Mount the ASA