Cisco ASA 5508-X User manual

Overview
•About the ASA 5508-X and 5516-X, on page 1
•Package Contents, on page 2
•Front Panel, on page 3
•Rear Panel, on page 3
•LEDs, on page 4
•Network Ports, on page 6
•Console Ports, on page 6
•Internal and External Flash Storage, on page 6
•Solid State Drive, on page 7
•Power Supply Modules, on page 7
•Hardware Specifications, on page 7
•Power Cord Specifications, on page 8
About the ASA 5508-X and 5516-X
The Cisco ASA 5508-X and the ASA 5516-X adaptive security appliances are part of the ASA 5500-X of
next-generation mid-range ASAs, and are built on the same security platform as the rest of the ASA family.
Your ASA 5508-X and ASA 5516-X ship with either ASA or Firepower Threat Defense software preinstalled.
To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device.
Note
This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper
web inspection and flow-specific analysis, improved secure connectivity via end-point security posture
validation, and voice and video over VPN support. It also provides enhanced support for intelligent information
networks through improved network integration, resiliency, and scalability.
The ASA 5508-X and the ASA 5516-X are a standard 1 RU chassis. To compare the performance metrics
and capabilities of the 5500-X ASAs, see Cisco ASA 5500-X Series Next-Generation Firewalls.
The ASA 5508-X and 5516-X have been validated for the following security standards certifications:
• Federal Information Processing Standards (FIPS) 140-2 for FTD 6.4.x and ASA 9.12.x
Overview
1

• Common Criteria (CC) certification for the Network Device Collaborative Protection Profile,
(NDcPPv2.2E), VPN Gateway Module (VPNGW_MOD_v1.1), and Firewall Module (FW_MOD_v1.4e)
for ASA 9.16.x
• Common Criteria (CC) certification for the Network Device Collaborative Protection Profile,
(NDcPPv2.2E), the IPS Extended Profile (IPSEP 2.11), Firewall Collaborative Protection Profile Module
(MOD_FW_v1.4e), and Virtual Private Network Gateway Protection Profile Module
(MOD_VPNGW_v1.1) for FTD 6.4.x
Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance
and Safety Information document and follow proper safety procedures.
Note
Package Contents
The following figure shows the package contents for the ASA 5508-X and ASA 5516-X. Note that the contents
are subject to change, and your exact contents might contain additional or fewer items.
Figure 1: ASA 5508-X and ASA 5516-X Package Contents
USB console cable (Type A to Type B)2Chassis1
Four 10-32-inch Phillips screws for rack mounting4Power cord3
Four M6 Phillip screws for rack mounting6Four 12-14-inch Phillips screws for rack mounting5
Four M4 Phillips screws for rack mounting7
Overview
2
Overview
Package Contents

Front Panel
The following figure shows the front panel of the ASA 5508-X. The ASA 5516 has an identical front panel.
There are four LEDS on the front panel. See LEDs, on page 4 for the descriptions.
Figure 2: ASA 5508-X and ASA 5516-X Front Panel
Rear Panel
The following figure shows the rear panel of the Cisco ASA 5508-X and ASA 5516-X.
Figure 3: ASA 5508-X and ASA 5516-X Rear Panel
Power cord socket
The chassis power-supply socket. See Power
Supply Modules, on page 7 for more
information about the ASA power supply.
2Power switch
Standard rocker-type power on/off switch
1
Network data ports
Eight Gigabit Ethernet RJ-45 (8P8C) network I/O
interfaces. The ports are numbered (from left to
right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a
pair of LEDs, one each for connection status and
link status. The ports are named and numbered
Gigabit Ethernet 1/1 through Gigabit Ethernet
1/8. See Network Ports, on page 6 for additional
information.
4Status LEDs
The locations and meanings of the status LEDs
are described in LEDs, on page 4.
3
Console ports
Two serial ports, a mini USB Type B, and a
standard RJ-45 (8P8C), are provided for
management access via an external system. See
Console Ports, on page 6 for additional
information.
6Management port
A Gigabit Ethernet interface restricted to network
management access only. Connect with an RJ-45
cable.
5
Overview
3
Overview
Front Panel

Reset button
A small recessed button that if pressed for longer
than three seconds resets the ASA to its default
“as-shipped” state following the next reboot.
Configuration variables are reset to factory
default. However, the flash is not erased, and no
files are removed.
You can use the service
sw-reset-button to disable the reset
button. The default is enabled.
Note
8USB port
A standard USB Type A port is provided,
allowing attachment of an external device such
as mass storage. See Internal and External Flash
Storage, on page 6 for additional information.
7
SSD bay
Covered slot in which the SSD is installed. You
can replace this drive if it fails. See Remove and
Replace the SSD for more information.
10SSD LED
Status light for installed solid-state drive (SSD).
See LEDs, on page 4 and Solid State Drive, on
page 7 for more information.
9
LEDs
The LEDs are located just off center on the front panel, and just to the left of the network ports on the rear
panel, with the SSD LED to the right of the Reset port. See Rear Panel, on page 3 for the locations.
DescriptionLED
Power supply status:
• Unlit—Power supply off.
• Green—Power supply on.
See Power Supply Modules, on page 7 for additional power information.
Power
System operating status:
• Green—Normal system function.
• Amber—Critical alarm indicating one or more of the following:
• Major failure of a hardware or software component.
• Over-temperature condition.
• Power voltage outside the tolerance range.
Status
Overview
4
Overview
LEDs

DescriptionLED
Status of the failover pair:
• Green—Failover pair operating normally.
• Unlit—Failover is not operational.
Status of a high-availability (HA) pair:
• Green—The active-mode unit.
• Amber—The standby unit.
Role of a standalone device:
• Green —The device is active normally.
Active
SSD LED behavior at first customer ship:
• Unlit—No SSD present.
• Green—SSD installed.
SSD LED behavior after June 2017:
• Unlit—No SSD present or no activity on the SSD.
• Green—Activity on the SSD.
See Remove and Replace the SSD for information on replacing a failed
SSD.
Note
SSD
Network Port Status
On the rear panel, a pair of LEDs (Link status and Connection status) for each of the eight Gigabit Ethernet
network ports, and the Gigabit Ethernet Management port.
Link status (L):
• Unlit—No link, or port is not in use.
• Green—Link established.
• Green, flashing—Link activity.
Connection-speed status (S):
• One blink every three seconds—10 Mbps.
• Two rapid blinks—100 Mbps.
• Three rapid blinks—1000 Mbps.
Overview
5
Overview
LEDs

Network Ports
Looking at the rear of the ASA, where the ports are located, port 1 is on the left, and port 8 is on the right,
next to the console and management ports. Each port is accompanied by a pair of LEDs, one each for link
status (L) and connection status (S). The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit
Ethernet 1/8. The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/4.
Console Ports
The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one
console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port
becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes
active. The console ports do not have any hardware flow control. You can use the command-line interface
(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal
emulation program on a computer.
RJ-45 Port
The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco part
number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
Mini USB Type B Port
The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and
Macintosh systems, no special driver is required. For Windows systems, you must download and install
a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the console
port without affecting Windows HyperTerminal operations. We recommend shielded USB cables with
properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800, 9600, 19200,
38400, 57600, and 115200 bps.
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC connected
to the console port before using the USB console port. See Connect to the Console Port with Microsoft
Windows for information on installing the driver.
Note
Internal and External Flash Storage
The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach
an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB
power units).
Internal USB Device
An embedded eUSB device is used as the internal flash; it is identified as disk0.
Overview
6
Overview
Network Ports

External USB Drive (Optional)
You can use the external Type A USB port to attach a data-storage device. The external USB drive
identifier is disk1. When the ASA is powered on, a connected USB drive is mounted as disk1 and is
available for you to use. Additionally, the file-system commands that are available to disk0 are also
available to disk1, including copy,format,delete,mkdir,pwd,cd, and so on.
If you insert a USB drive with more than one partition, only the first partition is mounted.
FAT-32 File System
The ASA only supports FAT-32-formatted file systems for the internal eUSB and external USB drives.
If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails, and
you receive an error message. You can enter the command format disk1: to format the partition to
FAT-32 and mount the partition to disk1 again; however, data might be lost.
Solid State Drive
The ASA 5508-X and 5516-X ship with an SSD installed that provides storage support. The SSD in the ASA
5508-X has 80 GB of useable space and is field-replaceable. The SSD in the ASA 5516-X has 1000 GB of
usable space and is also field replaceable. See Remove and Replace the SSD for information about replacing
it.
Power Supply Modules
The ASA 5508-X and ASA 5516-X ship with an internal 100-240 V AC power supply that provides 60 W.
Hardware Specifications
The following table contains hardware specifications for the ASA 5508-X and the ASA 5516-X.
Table 1: Hardware Specifications
Physical Specifications
1 RU
Form factor
Side-mount “ear” brackets included. See Rack-Mount the Chassis for more
information.
Rack mountable
No.Wall mountable
17.2 x 11.288 x 1.72 in. (43.688 x 28.672 x 4.369 cm)Dimensions
8 lbWeight
Memory
Overview
7
Overview
Solid State Drive

Total: 8 GB
Allocated to FW/VPN: 4 GB
Allocated to Module: 4 GB
DRAM
8 GBInternal Flash
60 WPower
Environment
Operating: 0 to 40°C (32 to 104°F)
Nonoperating: -25 to 70°C (-13 to 158°F)
Temperature
Operating: 90%
Nonoperating: 10 to 90%
Relative humidity
Operating: 3048 m (10,000 ft)
Nonoperating: 4572 m (15,000 ft)
Maximum altitude
Typical: 41.6 dBA
Maximum: 67.2 dBA
Acoustic Noise
Power Cord Specifications
Each power supply has a separate power cord. Standard power cords are available for connection to the security
appliance.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a incompatible power cord with this product may result in electrical safety
hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with
the system.
Only the approved power cords provided with the security appliance are supported. The following table lists
the supported power cords.
Note
The following illustrations show the cord, connector, and plug for each country listed in the table above.
Figure 4: Argentina (CAB-ACR)
Overview
8
Overview
Power Cord Specifications

Cord set rating: 10 A, 250 V2Plug: IRAM 20731
—Connector: IEC 60320/C133
Figure 5: Australia (CAB-ACA)
Cord set rating: 10 A, 250 V2Plug: A.S. 31121
—Connector: IEC 60320/C133
Figure 6: Brazil (CAB-C13-ACB)
Cord set rating: 10 A, 250 V2Plug: NBR 141361
—Connector: IEC 60320/C133
Figure 7: China (CAB-ACC)
Cord set rating: 10 A, 250 V2Plug: GB2009.1-20081
—Connector: IEC 60320/C133
Overview
9
Overview
Power Cord Specifications

Figure 8: Europe (CAB-ACE)
Cord set rating: 10 A, 250 V2Plug: CEE 7 VII1
—Connector: IEC 60320/C133
Figure 9: India (CAB-IND-10A)
Cord set rating: 10 A, 250 V2Plug: IS 6538-19711
—Connector: IEC 60320/C133
Figure 10: Italy (CAB-ACI)
Cord set rating: 10 A, 250 V2Plug: CE123-16-VII1
—Connector: IEC 60320/C133
Overview
10
Overview
Power Cord Specifications

Figure 11: Japan (CAB-JPN-3PIN)
Cord set rating: 12 A, 125 V2Plug: JIS C83031
—Connector: IEC 60320/C133
Figure 12: Korea (CAB-AC-C13-KOR)
Cord set rating: 10 A, 250 V2Plug: KSC83051
—Connector: IEC 60320/C133
Figure 13: North America (CAB-AC)
Cord set rating: 10 A, 125 V2Plug: NEMA 5-15P1
—Connector: IEC 60320/C133
Overview
11
Overview
Power Cord Specifications

Figure 14: South Africa (AIR-PWR-CORD-SA)
Cord set rating: 10 A, 250 V2Plug: SABS 16611
—Connector: IEC 60320/C133
Figure 15: Switzerland (CAB-ACS)
Cord set rating: 10 A, 250 V2Plug: SEV 10111
—Connector: IEC 60320/C133
Figure 16: Taiwan (CAB-ACTW)
Cord set rating: 10 A, 250 V2Plug: CNS109171
—Connector: IEC 60320/C133
Overview
12
Overview
Power Cord Specifications

Figure 17: United Kingdom (CAB-ACU)
Cord set rating: 10 A, 250 V2Plug: BS1363a/SS1451
—Connector: IEC 60320/C133
Overview
13
Overview
Power Cord Specifications

Overview
14
Overview
Power Cord Specifications