End-of-Support for management of the Secure Firewall Threat Defense Version 7.0.x managed by Cloud-delivered Firewall Management Center

Which version of Secure Firewall Threat Defense will Cloud-delivered Firewall Management Center stop managing?

Cloud-delivered Firewall Management Center will stop managing Secure Firewall Threat Defense Version 7.0.x from October 22, 2025.

Why is this change necessary?

This change is necessary to ensure compatibility and security for our customers' systems. As we upgrade our systems, it is essential that the latest version of Secure Firewall Threat Defense devices is supported to maintain reliability and performance.

From October 22, 2025, will I be able to use my existing Secure Firewall Threat Defense 7.0.x devices?

We will not support the management of Secure Firewall Threat Defense devices running Version 7.0.x from Cloud-delivered Firewall Management Center after October 22, 2025. You will not be able to make or deploy changes to Secure Firewall Threat Defense devices running Version 7.0.x and earlier except to upgrade or unregister.

Your impacted devices will still be visible in Cloud-delivered Firewall Management Center, but in read-only mode only. New changes cannot be deployed to the devices.

What are the recommended upgrade options?

You are required to upgrade to at least Version 7.2.x. The Cisco-suggested version is 7.4.2.

Can I register new Version 7.0.x devices?

While the system will allow you to register new Secure Firewall Threat Defense Version 7.0.x devices to Cloud-delivered Firewall Management Center, from October 22, 2025, these newly registered devices will be in read-only mode only. You are required to upgrade to Version 7.2.x or to Cisco-suggested Version 7.4.2 prior to registration or the October 22, 2025, deadline.

What will happen if I don't upgrade?

From October 22, 2025, you will not be able to make or deploy changes to Secure Firewall Threat Defense devices running Version 7.0.x and earlier, except to upgrade or unregister. Failing to upgrade leaves you vulnerable to compatibility issues, security issues, and possible downtime. To minimize disruption, you are required to upgrade now.

Will there be any impact to my existing systems or applications?

Upgrading is unlikely to have any significant impact on your current deployment. If you face any issues during the upgrade process, contact Cisco Technical Assistance (TAC).

For assistance in upgrading, Cisco offers the LevelUp program. You can request assistance using the following link: https://cloud.path.cisco.com/lp-a01-secure-firewall-levelup.

How do I upgrade?

For information about upgrading Secure Firewall Threat Defense devices, go to Threat defense upgrade guide for Cloud-delivered Firewall Management Center.

Are there costs associated with upgrade?

There is no cost, unless your hardware must also be upgraded. (The reference to hardware is limited to the Cisco Secure ASA 5508-X and Cisco Secure ASA 5516-X running Secure Firewall Threat Defense Version 7.0.x). If you have to refresh your hardware, reach out to your Cisco Account Team.

Is there an exception for the customers who are not able to complete the device upgrade before October 22, 2025?

No, there are no exceptions to this requirement.

When will the Cloud-delivered Firewall Management Center end the support for management of Version 7.2.x?

Cloud-delivered Firewall Management Center will support the management of Secure Firewall Threat Defense devices running Version 7.2.x until October 31, 2026.

What if I'm unsure about how to proceed?

Reach out to Cisco Technical Assistance Center (TAC) (or the Cisco account team) for clarifications.