CloudLabBox
Try the free demo

Cisco ASAv in EVE-NG, already installed

The ASAv is in the Add Node list of every CloudLabBox workspace, from ASA 9.4 to 9.22, with older ASA images on their own template. Use it for firewall labs: access rules, NAT and site-to-site or remote-access VPN.

Choose a planCheck it in the free demo

Vendor
Cisco
In Add Node
46 images
Templates
asav asa
Newest
asav-9.22.1.1-PLR-Licensed

Installed versions

Every ASAv name in the Add Node image list, exactly as you’ll pick it.

Started in our checksKnown problemEach links to the tested tip below.

Template asav

ASAv

37 images on this template. Newest first.

  • asav-9.22.1.1-PLR-Licensed
  • asav-9.20.3-PLR-Licensed
  • asav-9-20-2-22
  • asav-9-20-2Started in our checks
  • asav-9.19.1-PLR-Licensed
  • asav-9-18-2-5
  • asav-9-18-2
  • asav-9-18-1
  • asav-9-17-1-10
  • asav-9.17-1-7
  • asav-917-1
  • asav-9-16-3-14
Show 24 older
  • asav-916-1-28
  • asav-916-1
  • asav-915-1-15
  • asav-915-1-10
  • asav-915-1-7
  • asav-915-1-1
  • asav-915-1
  • asav-914-2-4
  • asav-914-1-30
  • asav-914-1-19
  • asav-914-1-15
  • asav-914-1-10
  • asav-914-1-6
  • asav-914-1
  • asav-913-1-12
  • asav-913-1
  • asav-992-59
  • asav-981
  • asav-971-001
  • asav-964-45
  • asav-963-1
  • asav-962-001
  • asav-953-9
  • asav-941-200

Also installed, listed by name:

  • asav-9.92-59-telnet

Template asa

ASA (older images)

9 images on this template.

  • asa-8.02
  • asa-8.42
  • asa-802-k8
  • asa-802-k8-multi
  • asa-802-k8-single
  • asa-842-k8
  • asa-9.1.5
  • asa-9.1.5-LicensedKnown problem
  • asa-915-16-k8-CL-L

Add it to a lab

In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.

Add Node defaults for ASAv, read from the EVE-NG templates on 28 October 2026
ImageTemplateCPURAMInterfacesConsole
ASAvasav12048 MB8 interfaces: Mgmt0/0, then Gi0/0 to Gi0/6telnet
ASA (older images)asa12048 MB4 interfaces: eth0 to eth3telnet

EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 1 vCPU and 2,048 MB, which fits the free demo’s 6 vCPU and 8 GB, so you can start one there and open its console.

See default usernames and passwords Read every node tip

A DMZ behind an ASAv

Place an ASAv between an inside network, a DMZ and an IOSv router on the outside, with an Alpine Linux host inside and another in the DMZ. You write the access rules and NAT that let outside users reach the DMZ host and nothing inside.

  • 1×ASAv asav1 vCPU, 2048 MB
  • 1×IOSv vios1 vCPU, 1024 MB
  • 2×Alpine Linux clbalpinebase2 vCPU, 512 MB each

Added with these defaults, the lab uses 6 vCPU and 4 GB of RAM. The smallest plan that fits is Lite, with 6 vCPU and 8 GB: £3 a day, or £0.50 an hour On-Demand.

Choose a planGive nodes more CPU or RAM and you add that instead.

Licences are yours to bring

A name containing PLR-Licensed or Licensed isn't a Cisco entitlement: check the licence status inside the ASAv. CloudLabBox doesn't provide Cisco licences, so bring your own or an evaluation for anything that needs one.

The images run only inside your CloudLabBox workspace; they aren’t available to download.

Guided labs that use ASAv

Ready-made labs in the Shared folder of every lab workspace, each with a scenario, tasks, checks and the full solution. Here are 8 of the 22 that use it, from 2 courses, counted on 2 November 2026.

All guided practice labs

Questions about ASAv

What is Cisco ASAv?

The ASAv is Cisco's Adaptive Security Appliance as a virtual machine: stateful firewall, NAT and remote-access and site-to-site VPN, with the ASA CLI and ASDM.

What are the older ASA images?

They're earlier ASA 8.0, 8.4 and 9.1 releases, such as asa-842-k8, on a separate asa template with interfaces labelled eth0 to eth3. Use the ASAv for current 9.x releases, and avoid asa-9.1.5-Licensed, whose disk is truncated.

How do I see what the ASAv will do to a packet?

packet-tracer input inside tcp 10.0.0.10 1025 203.0.113.10 80 walks a simulated packet through routing, NAT and access rules and shows where it's allowed or dropped. show xlate and show conn list live translations and connections.

Cisco: which ASAv and IOSv images passed the latest startup checks?

asav-9-20-2 reached the ciscoasa> prompt. vios-adventerprisek9-m.spa.159-3.m8 reached its initial configuration dialogue. In the ASAv profile, the first adapter is Mgmt0/0 and data adapters start at Gi0/0. Use the data adapters for traffic through the firewall.

From the node tips, updated 9 October 2026.

Cisco: why should I avoid the installed ASA 9.1.5 Licensed image?

The installed asa-9.1.5-Licensed disk is truncated and needs replacement. Use another suitable image while that remains unresolved; asav-9-20-2 has passed a console startup check.

From the node tips, updated 9 October 2026.

Which ASAv images are installed?

46 images (37 ASAv, 9 ASA (older images)), all listed on this page exactly as Add Node shows them. The newest is asav-9.22.1.1-PLR-Licensed.

How much CPU and RAM does a ASAv node use?

When you add one, the asav template adds 1 vCPU and 2048 MB of RAM; the asa template adds 1 vCPU and 2048 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.

More images

CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.