The ASA 5585-X has a slot for an I/O module. These range in processing power by a factor of 10, from SSP-10 SSP-20, SSP-40 and SSP-60. SSP stands for security services processor. The configuration is initially in memory as a running-config but would normally be saved to flash memory. In config mode the configuration statements are entered. There is a command line interface (CLI) that can be used to query operate or configure the device. The ASA software has a similar interface to the Cisco IOS software on routers. The names of firmware files includes a version indicator, -smp means it is for a symmetrical multiprocessor (and 64 bit architecture), and different parts also indicate if 3DES or AES is supported or not. The ROMMON also has a command line that can be used to load or select other software images and configurations. In the boot sequence a boot loader called ROMMON (ROM monitor) starts, loads a Linux kernel, which then loads the lina_monitor, which then loads lina. This schedules processes internally rather than using the Linux facilities. It runs a single Executable and Linkable Format program called lina. A code insertion implant called BANANAGLEE, was made persistent by JETPLOW. In 2017 The Shadow Brokers revealed the existence of two privilege escalation exploits against the ASA called EPICBANANA and EXTRABACON. Īnother flaw in a WebVPN feature was fixed in 2018. Ī security flaw was identified when users customized the Clientless SSL VPN option of their ASA's but was rectified in 2015.

Early reviews indicated the Cisco GUI tools for managing the device were lacking. Cisco ASA has become one of the most widely used firewall/VPN solutions for small to medium businesses.

Pix to asa migration tool 8.4