End-of-Support for management of Secure Firewall Threat Defense devices, Version 7.0.x, managed by Cloud-Delivered Firewall Management Center

Which version of Secure Firewall Threat Defense devices has Cloud-Delivered Firewall Management Center stopped managing as of December 15, 2025?

Cloud-Delivered Firewall Management Center stopped managing Secure Firewall Threat Defensedevices, Version 7.0.x, from December 15, 2025.

Why is this necessary?

This was necessary to ensure compatibility and security for our customers' systems. As we upgrade our systems, it was essential that only the latest version of Secure Firewall Threat Defense devices is supported to maintain reliability and performance.

Can I onboard Version 7.0.x devices after December 15, 2025?

No, you can no longer onboard Secure Firewall Threat Defense, Version 7.0.x, devices after December 15, 2025.

After December 15, 2025, will I be able to use my existing Secure Firewall Threat Defense 7.0.x devices?

Cloud-Delivered Firewall Management Center will not support the management of Secure Firewall Threat Defense devices running Version 7.0.x after December 15, 2025. You will not be able to make or deploy changes to Secure Firewall Threat Defense devices running Version 7.0.x and earlier except to upgrade or unregister.

What are the recommended upgrade options?

You are required to upgrade to at least Version 7.2.x. The Cisco-suggested version is 7.6.2.

How do I upgrade?

For information about upgrading Secure Firewall Threat Defense devices, refer to Threat defense upgrade guide for Cloud-Delivered Firewall Management Center.

Are there costs associated with upgrade?

There is no addtional cost, unless your hardware must also be upgraded. (The reference to hardware is limited to Cisco Secure ASA 5508-X and Cisco Secure ASA 5516-X running Secure Firewall Threat Defense Version 7.0.x). If you must refresh your hardware, reach out to your Cisco account team.

What will happen if I don't upgrade?

From December 15, 2025, you will not be able to make or deploy changes to Secure Firewall Threat Defense devices running Version 7.0.x and earlier, except to upgrade or unregister. Failing to upgrade leaves you vulnerable to compatibility issues, security issues, and possible downtime. To minimize disruption, you are required to upgrade now.

Will there be any impact to my existing systems or applications?

Upgrading is unlikely to have any significant impact on your current deployment. If you face any issues during the upgrade process, contact the Cisco Technical Assistance Center (TAC).

For assistance in upgrading, Cisco offers the LevelUp program. You can request assistance using this link.

Can I migrate my existing ASA 5508 and 5516 devices to Cloud-Delivered Firewall Management Center?

We recommend that you do not migrate your existing ASA 5508 and ASA 5516 devices to Cloud-Delivered Firewall Management Center because the last supported Threat Defense version for these ASA devices is 7.0.

In addition, Cisco has stopped support for management of Threat Defense Version 7.0.x in Cloud-Delivered Firewall Management Center as of December 31, 2025, and the ASA 5508 and 5516 devices cannot be upgraded to Version 7.2.x and later.

Can I manage my device's health in read-only mode after support ends?

After December 15, 2025, you will not be able to deploy device health policy changes, if any, to Secure Firewall Threat Defense devices running Version 7.0.x and earlier. These devices will continue to operate with the previously configured health policies.

When will Cloud-Delivered Firewall Management Center end support for management of Version 7.2.x?

Cloud-Delivered Firewall Management Center will support the management of Secure Firewall Threat Defense devices running Version 7.2.x until October 31, 2026.

What if I'm unsure about how to proceed?

Reach out to Cisco Technical Assistance Center (TAC) (or the Cisco account team) for clarifications.