Information Guide

11
Supported Devices and Software Versions for Cisco Security Manager 3.3
OL-19949-01
Supported Software
– 12.2(25)EWA, FZ, EZ, EY, SE, EW, SEA, SEB, SEC, SED, SEE, SEG
– 12.2(20)EU
– 12.1(26)E
– 12.1(20)EW, EU, E
– 12.1(19)EA1, EA1d
– 12.1(14)AX
– 12.1(11)AX
• To configure and manage VPNs on Catalyst 6500/7600 devices, the earliest software release is Cisco
IOS Software Release 12.2(17b)SXA.
• To configure and manage IDSM settings on Catalyst 6500/7600 devices, the earliest software release
is Cisco IOS Software Release 12.2(18)SXF4.
• For routers running an IPS-enabled version of Cisco IOS Software, the earliest supported Cisco IOS
Software release is 12.4(11)T2.
Other Supported Software
The following list describes the minimum supported software versions plus the specific release numbers
that have additional support in Security Manager for devices that run operating system other than Cisco
IOS Software. You must use a software version that meets at least the minimum. If you use a version that
is not listed, Security Manager will treat it as one of these versions (the most closely-matching version,
which is typically the release number nearest to it but lower). Any features that are unique to the version
you are using are not supported in Security Manager.
• Cisco PIX 500 Series Firewalls—PIX Firewall Software Release 6.3(1-5), 7.0(1, 2, 4-8), 7.1(1-2),
7.2(1-3), 8.0(2-3), and 8.1(1-2).
• Cisco ASA-5500 Series Adaptive Security Appliances (ASA)—ASA Software Release 7.0(1, 2,
4-8), 7.1(1-2), 7.2(1-4), 8.0(2-3), 8.1(1-2), and 8.2(1), with the following exceptions:
– Do not use this version of Security Manager to manage ASA 8.3 devices. This version of
Security Manager configures ASA 8.3 devices in downward-compatibility mode, meaning that
the device configuration does not use the new features introduced in version 8.3. Because of the
extensive changes introduced with version 8.3, it is not downwardly-compatible with older ASA
releases. If you want to manage ASA 8.3 devices with Security Manager, you must upgrade to
Security Manager 4.0.
– You cannot use Security Manager to manage SSL VPNs on ASA 7.x. ASA Software Release
7.2(4) is supported only on the ASA 5505 platform.
• Cisco Catalyst 6500 Series Firewall Services Module (FWSM)—FWSM Software Release 2.2,
2.2(1), 2.3(1-4), 3.1(1, 3-9), 3.2(1-4), and 4.0(1).
• IPS sensors and modules—IPS Software 5.1, 6.0, 6.1, 6.2, and 7.0, with these restrictions:
– IPS signature updates are supported only on IPS Software 5.1(5)E1 and later.
– You cannot configure any IPv6 features that are available with version 6.2 and higher. If you
configure IPv6 features directly on the device, Security Manager does not disturb your
configuration. Consider using Security Manager’s FlexConfig feature to manage IPv6
configurations.