Cisco Notification Alert -ASA 5500 Series NG Firewall-01-Nov-2015 17:49 GMT

Feedback Sign Up Unsubscribe         End-of-Sale and End-of-Life Announcements - ASA 5500-X Series Next-Generation Firewalls Title: End-of-Sale and End-of-Life Announcement for the Cisco AnyConnect Essentials, Mobile, Phone, Premium, Shared Premium, Flex, Advanced Endpoint Assessment, and FIPS Client Licenses Description: Cisco announces the end-of-sale and end-of life dates for the Cisco AnyConnect Essentials, Mobile, Phone, Premium, Shared Premium, Flex, Advanced Endpoint Assessment, and FIPS Client Licenses. The last day to order the affected product(s) is August 31, 2015. Customers with active service contracts will continue to receive support from the Cisco Technical Assistance Center (TAC) as shown in Table 1 of the EoL bulletin. Table 1 describes the end-of-life milestones, definitions, and dates for the affected product(s). Table 2 lists the product part numbers affected by this announcement. For customers with active and paid service and support contracts, support will be available under the terms and conditions of customers' service contract. Date: 21-OCT-2015 Title: End-of-Sale and End-of-Life Announcement for the Cisco FirePOWER Software v5.3 and v5.3.1 and FireSIGHT Management Center Software v5.3 and v5.3.1 Description: Cisco announces the end-of-sale and end-of life dates for the Cisco FirePOWER Software v5.3 and v5.3.1 and FireSIGHT Management Center Software v5.3 and v5.3.1. The last day to order the affected product(s) is January 29, 2016. Customers with active service contracts will continue to receive support from the Cisco Technical Assistance Center (TAC) as shown in Table 1 of the EoL bulletin. Table 1 describes the end-of-life milestones, definitions, and dates for the affected product(s). Table 2 lists the product part numbers affected by this announcement. For customers with active and paid service and support contracts, support will be available under the terms and conditions of customers' service contract. Click here for the French Version of this Bulletin. Date: 30-OCT-2015 Find additional information in End-of-Sale and End-of-Life Products Security Advisories & Responses - ASA 5500-X Series Next-Generation Firewalls Title: Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products Description: On June 11, 2015, the OpenSSL Project released a security advisory detailing six distinct vulnerabilities, and another fix that provides hardening protections against exploits as described in the Logjam research. Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or corrupt portions of OpenSSL process memory. This advisory will be updated as additional information becomes available. Cisco will release software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities may be available. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl Date: 16-OCT-2015 Find additional information in Cisco Security Advisories & Responses Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5510 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-19-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-21-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5510 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5510 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-6-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5510 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5520 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-6-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5520 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5520 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5580 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5580 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5580 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5540 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5520 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5550 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5550 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5550 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5515-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-21-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-19-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5505 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Alert Type:   Suggested: 8.4.7 Interim ; 9.1.6 Interim     Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5580 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.1 Interim Alert Type: Obsolete File File Name: asa931-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.2 Interim Alert Type: Obsolete File File Name: asa922-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-1-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-29-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-26-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.3 Interim Alert Type: New File File Name: asa933-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.4 Interim Alert Type: New File File Name: asa924-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 22-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.3.2 Interim Alert Type: Obsolete File File Name: asa932-2-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 05-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.5.1 Interim Alert Type: New File File Name: asa951-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.2.3 Interim Alert Type: Obsolete File File Name: asa923-4-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.4.1 Interim Alert Type: New File File Name: asa941-6-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5555-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. File Release Date: 21-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5512-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-19-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-21-smp-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5512-x, 5515-x, 5525-x, 5545-x, 5580-x, 5585-x, and ASASM. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5555-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5525-X Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5545-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.14 Alert Type: New File File Name: asa-device-pkg-1.2.3.14.zip File Description: Cisco ASA Device Package 1.2(3.14) for Cisco APIC 1.1(1s) File Release Date: 29-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.11 Alert Type: New File File Name: asa-device-pkg-1.2.3.11.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 14-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5585-X Adaptive Security Appliance Software Type: ASA for Application Centric Infrastructure (ACI) Device Package Release Version: 1.2.3.10 Alert Type: New File File Name: asa-device-pkg-1.2.3.10.zip File Description: Cisco ASA Device Package 1.2(3.10) for Cisco APIC 1.1(1s) File Release Date: 09-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5540 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.5 Interim Alert Type: Obsolete File File Name: asa915-19-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Alert Type: Obsolete File File Name: asa915-21-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 06-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5540 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.1.6 Interim Alert Type: New File File Name: asa916-1-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-4-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-8-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Alert Type: New File File Name: asa916-6-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. File Release Date: 30-OCT-2015 Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5540 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Software Release Version: 9.0.4 Interim Alert Type: Obsolete File File Name: asa904-26-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Alert Type: Obsolete File File Name: asa904-29-k8.bin File Description: Cisco Adaptive Security Appliance Software for the ASA 5505, 5510, 5520, 5540, and 5550. Please read the Release Note prior to downloading this release. Obsolete Date: 21-OCT-2015 Find additional information in Software Downloads index. Software Updates for ASA 5500-X Series Next-Generation Firewalls Product Name: ASA 5550 Adaptive Security Appliance Software Type: Adaptive Security Appliance (ASA) Device Manager Release Version: 7.5.1.90 Alert Type: New File File Name: asdm-751-90.bin File Description: Cisco Adaptive Security Device Manager for ASA 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 9.4, and 9.5. File Release Date: 15-OCT-2015 Find additional information in Software Downloads index. Known Bugs - ASA 5500-X Series Next-Generation Firewalls Alert Type: New Bug Id: CSCuw52086 Title: ACL ordering Status: Fixed Severity: 2 Severe Description: Symptom: ACL list has all the entries, including newly created entries with order '40x' range. The script seems to be handling only the entries marked created/modified Conditions: Script should re-arrange the ACEs which haven't been marked as modified. Workaround: manual modification Further Problem Description: Last Modified: 03-OCT-2015 Known Affected Releases: 1.2(3.4) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCut40770 Title: Interface TLV to SFR is corrupt when frame is longer than 2048 bytes Status: Fixed Severity: 2 Severe Description: Symptom: Some configured ASA interfaces missing or not displayed from Firesight Management Center Conditions: Interface TLV ethernet frame greater than 2048 bytes. Usually occurs with multiple interfaces and sub-interfaces configured with lengthy names for each interface. Workaround: Enable jumbo-frame reservation on ASA. Further Problem Description: Last Modified: 31-OCT-2015 Known Affected Releases: 9.3(1.221) Known Fixed Releases: * 100.14(0.82), 100.15(0.80), 100.15(20.14), 99.2(2.21) Alert Type: Updated * Bug Id: CSCur45455 Title: ASA crashes in DHCPV6 Relay agent feature Functionality Status: Fixed Severity: 2 Severe Description: * Symptom: A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance (ASA) software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. Cisco ASA Software is affected by this vulnerability only if the software is configured with the DHCPv6 relay feature. An attacker could exploit this vulnerability by sending crafted DHCPv6 packets to an affected device. Note: Only DHCPv6 packets directed to the Cisco ASA interface where the DHCPv6 relay is enabled can be used to trigger this vulnerability. This vulnerability affects systems configured in routed or transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered only by IPv6 traffic. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150115-asa-dhcp Conditions: See Security Advisory Workaround: Further Problem Description: PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 7.1/6.4: http://tools.cisco.com/security/center/cvssCalculator.x?vector=AV:N/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C&version=2.0 CVE ID CVE-2015-6324 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Last Modified: 29-OCT-2015 Known Affected Releases: 9.1(5) Known Fixed Releases: 100.11(0.54), 100.12(0.103), 100.12(24.5), 100.12(30.2), 100.13(0.12), 100.13(1.13), 100.13(11.23), 100.13(16.22), 100.13(19.6), 100.13(20.3) Alert Type: Updated * Bug Id: CSCuv50709 Title: Standby ASA inside IP not reachable after Anyconnect disconnect Status: Fixed Severity: 2 Severe Description: Symptom: After Anyconnect VPN is disconnected, standby inside IP is not reachable from active unit or from LAN hosts. In order to make it reachable again, issue write standby or reconnect VPN again Conditions: ASA pair in failover with Anyconnect VPN connecting to the outside interface Workaround: write standby or reconnect VPN again Further Problem Description: the standby ASA becomes unreachable (inside ip) after disconnecting Anyconnect VPN Client. Reconnecting VPN or ?wr standby? resolves the issue. When customer disconnects Anyconnect Client session with the outside interface of the ASA, the inside interface of ASA starts dropping traffic with following logs : Jun 10 12:49:14 192.168.5.21 %ASA-4-113019: Group = XXXX, Username = XXXX, IP = x.x.x.x, Session disconnected. Session Type: SSL, Duration: 0h:20m:55s, Bytes xmt: 0, Bytes rcv: 110890, Reason: User Requested Jun 10 12:49:14 192.168.5.21 %ASA-4-737032: IPAA: Unable to remove x.x.x.x from standby: address not found Jun 10 12:49:14 192.168.5.21 %ASA-4-106023: Deny icmp src inside:x.x.x.x dst inside:y.y.y.y (type 8, code 0) by access-group "inside_access_in" [0x0, 0x0] Jun 10 12:49:19 192.168.5.21 %ASA-4-106023: Deny icmp src inside::x.x.x.x dst inside:y.y.y.y (type 8, code 0) by access-group "inside_access_in" [0x0, 0x0] Jun 10 12:49:24 192.168.5.21 %ASA-4-106023: Deny icmp src inside::x.x.x.x dst inside:y.y.y.y (type 8, code 0) by access-group "inside_access_in" [0x0, 0x0] Jun 10 12:49:29 192.168.5.21 %ASA-4-106023: Deny icmp src inside::x.x.x.x dst inside:y.y.y.y (type 8, code 0) by access-group "inside_access_in" [0x0, 0x0] ACL lookup should not happen for self traffic but even if we add an ACL line to permit the traffic then drop reason is packet tracer is Drop-reason: (fo-standby) Dropped by standby unit Pings work under normal conditions from active to standby and from lan hosts. >> Pings work also when anyconnect client is connected. ASA# sh vpn-sessiondb anyconnect Session Type: AnyConnect Username : xxxx Index : 147 Assigned IP : 44.22.254.154 Public IP : 194.98.70.113 Protocol : AnyConnect-Parent SSL-Tunnel DTLS-Tunnel License : AnyConnect Premium Encryption : AnyConnect-Parent: (1)none SSL-Tunnel: (1)AES256 DTLS-Tunnel: (1)AES256 Hashing : AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA1 DTLS-Tunnel: (1)SHA1 Bytes Tx : 13276 Bytes Rx : 96649 Group Policy : xxxx Tunnel Group : xxxx Login Time : 14:08:02 CEDT Thu Jun 11 2015 Duration : 0h:07m:18s Inactivity : 0h:00m:00s VLAN Mapping : N/A VLAN : none Audt Sess ID : c0a805130009300055797a22 Security Grp : none syhana-validation/pri/act# ping 192.168.5.21 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.5.21, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms >> After Anyconnect is disconnected, standby ip becomes unreachable. syhana-validation/pri/act# sh vpn-sessiondb anyconnect INFO: There are presently no active sessions syhana-validation/pri/act# syhana-validation/pri/act# syhana-validation/pri/act# syhana-validation/pri/act# ping 192.168.5.21 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.5.21, timeout is 2 seconds: ????? Success rate is 0 percent (0/5) If Anyconnect VPN is connected again, standby is reachable. Customer has tried with 2 simultaneous Anyconnect clients. Disconnected first. Standby is reachable. Disconnected second VPN. Standby is Unreachable The ide Last Modified: 27-OCT-2015 Known Affected Releases: 9.2 Known Fixed Releases: * 100.11(0.63), 100.12(0.148), 100.13(0.107), 100.14(0.76), 100.15(0.34), 100.15(16.8), 100.15(17.12), 100.15(3.60), 100.15(8.15), 100.16(0.2) Alert Type: Updated * Bug Id: CSCtx43501 Title: CPU hog due to snmp polling of ASA memory pool information Status: Fixed Severity: 2 Severe Description: Symptom: The ASA provides access to three different memory pools via SNMP. 1) The "System memory" pool (which is a superset of 2 and 3 below) 2) The MEMPOOL_DMA pool 3) The MEMPOOL_GLOBAL_SHARED pool If the MEMPOOL_GLOBAL_SHARED pool information is queried via SNMP, a CPU hog might occur. The ASA's CPU may be held by the SNMP process for too long before yielding the CPU to other processes. If the data rate is high enough through the ASA, packets might be dropped. If an ASA is experiencing this problem, it could generate syslogs that look like this: %ASA-4-711004: Task ran for 374 msec, Process = snmp, PC = 12229dc, Call stack = 0x00000000012229dc 0x000000000122175c 0x000000000121e45a 0x0000000001221247 0x00000000011fba3a 0x00000000011fa1ca 0x00000000004245a5 Also, the output of 'show process cpu-hog' will show entries for SNMP: Process: snmp, PROC_PC_TOTAL: 9443, MAXHOG: 13, LASTHOG: 12 LASTHOG At: 12:47:00 CST Jan 23 2012 PC: 8c45b98 (suspend) Process: snmp, NUMHOG: 9443, MAXHOG: 13, LASTHOG: 12 LASTHOG At: 12:47:00 CST Jan 23 2012 PC: 8c45b98 (suspend) Call stack: 8b6aac3 8b4ae5d 8b49bbc 8063b33 Conditions: To encounter this problem, memory information for the "Global Shared" pool must be queried via SNMP. Workaround: Avoid polling the memory information for the Global Shared pool: Exclude: .1.3.6.1.4.1.9.9.48.1.1.1.X.7 - "MEMPOOL_GLOBAL_SHARED" where X is the integer corresponding to a particular statistic about the pool. PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 4/3.8: http://tools.cisco.com/security/center/cvssCalculator.x?vector=AV:N/AC:L/Au:S/C:N/I:N/A:P/E:F/RL:U/RC:C&version=2.0 CVE ID CVE-2012-4664 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Further Problem Description: Last Modified: 27-OCT-2015 Known Affected Releases: 8.1(2.23), 8.2(3.6), 8.4(2.8), 8.4(3.8), 8.4(4), 9.1(2) Known Fixed Releases: * 100.11(0.62), 100.12(0.140), 100.12(0.144), 100.12(0.145), 100.13(0.95), 100.13(0.96), 100.13(0.98), 100.14(0.70), 100.14(0.71), 100.15(0.24) Alert Type: Updated * Bug Id: CSCuu02848 Title: Disable ECDSA SSL Ciphers When Manually Configuring RSA Cert for SSL Status: Fixed Severity: 2 Severe Description: Symptom: -Starting in 9.4(x) releases, by default the ASA will attempt to negotiate an ECDSA cipher for TLSv1.2 and offer the ASA temporary self-signed ECDSA certificate to the client -If an RSA certificate is specified in the configuration, it will only be used if an RSA cipher is decided upon -This means that if we wish to use a explicitly configured RSA certificate, we must manually disable the ECDSA ciphers as discussed in the 9.4(x) release notes: http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116497 -This enhancement is to change this behavior and make SSL deployment easier -Ideally, the ECDSA ciphers should be automatically disabled when an RSA certificate is specified in the configuration. Conditions: -ASA running 9.4(x) or newer which has support for ECDSA certificate usage with SSL -SSL services configured (SSLVPN, ASDM, HTTPS, etc;) -RSA certificate for SSL ("ssl trust-point SSL_CERT_TRUSTPOINT") -Default settings for SSL ciphers ("show ssl ciphers") Workaround: -Disable ECDSA ciphers for TLSv1.2, as discussed in the ASA 9.4(x) release notes -Choose to use an ECDSA certificate for SSL rather than an RSA certificate Further Problem Description: N/A Last Modified: 27-OCT-2015 Known Affected Releases: 9.4, 9.4(1), 9.5(1) Known Fixed Releases: * 100.13(0.113), 100.14(0.79), 100.15(0.58), 100.15(17.25), 100.15(19.2), 100.15(20.4), 100.15(8.18), 100.16(0.4), 100.16(1.10), 9.4(2.1) Alert Type: Updated * Bug Id: CSCuu91304 Title: Immediate FIN from client after GET breaks scansafe connection Status: Fixed Severity: 2 Severe Description: Symptom: Connections through the ASA to a scansafe tower may fail if the client sends a FIN packet immediately following a GET packet. This hangs the TCP connection and causes the transaction to fail. Conditions: This is seen if the CLIENT sends a TCP FIN packet before any data comes back from the TOWER. Workaround: None at this time Further Problem Description: Last Modified: 27-OCT-2015 Known Affected Releases: 9.1(5.21) Known Fixed Releases: * 100.13(0.118), 100.14(0.81), 100.15(0.71), 100.15(17.32), 100.15(20.11), 100.15(8.23), 100.16(0.6), 100.16(1.19), 9.4(2.1), 99.2(2.19) Alert Type: Updated * Bug Id: CSCuw15615 Title: Backup unknown with dynamic pat pool Status: Fixed Severity: 2 Severe Description: Symptom: PAT Pool IP's Backup shows up as unknown Conditions: Two node cluster is brought up with dynamic pat pool configs and transactional commit for NAT is enabled Workaround: Disable transactional commit for NAT Further Problem Description: Last Modified: 24-OCT-2015 Known Affected Releases: 100.15(1.86), 9.4(1.100) Known Fixed Releases: * 100.12(0.152), 100.13(0.117), 100.14(0.81), 100.15(0.67), 100.15(17.30), 100.15(20.10), 100.15(8.22), 100.16(0.5), 100.16(1.13), 99.1(3.184) Alert Type: Updated * Bug Id: CSCtf01287 Title: SSH to the ASA may fail - ASA may send Reset Status: Fixed Severity: 2 Severe Description: * Symptom: ssh to the box may fail even after recreating the rsa key-pair and removing and adding the ssh lines. Conditions: This was first observed on a single context ASA5580 running 8.1.1 as well another ASA5580 multiple context running 8.2.1(4) Workaround: None Further problem description: debug ssh 255 may not show any output at all captures may show the ASA sending a FIN ACK packet right after the 3-way handshake or it may send a Reset right after the 3-way handshake. Last Modified: 23-OCT-2015 Known Affected Releases: 8.1(1), 8.2(1.4), 8.2(2) Known Fixed Releases: 100.5(5.43), 8.0(5.21), 8.1(2.49), 8.2(3.109), 8.2(3.6), 8.2(4), 8.3(2.7) Alert Type: Updated * Bug Id: CSCut49034 Title: ASA: High CPU on standby due to RDP conn to AC client from CL SSL portal Status: Fixed Severity: 2 Severe Description: Symptom: CPU on standby ASA spikes to 100% Conditions: Host (connecting through clientless VPN with RDP plugin)rdp to a host connected through anyconnect VPN. Stateful failover configured on an active-standby failover pair. Workaround: None Further Problem Description: High CPU on standby ASA unit due to a specific connection on the ASA from a host connecting to clientless VPN when stateful failover is enabled. Host (connecting through clientless VPN )rdp to a host connected through anyconnect VPN. When this particular connection goes through the ASA, we find that the active ASA builds a single connection. standby ASA builds numerous connections with same source and destination ports. Connection on the primary/active: act/pri/alan3usv01# sh conn all add 66.241.60.197 | i 3389 TCP outside 10.145.44.253:3389 NP Identity Ifc 66.241.60.197:62481, idle 0:00:00, bytes 4131029, flags UO Connections on secondary:(close to 2500) stby/sec/alan3usv01# sh conn all add 66.241.60.197 | i 3389 TCP outside 10.145.44.253:3389 NP Identity Ifc 66.241.60.197:62481, idle 0:00:05, bytes 4131029, flags UO TCP outside 10.145.44.253:3389 NP Identity Ifc 66.241.60.197:62481, idle 0:00:06, bytes 4131029, flags UO We see a lot of connection teardown on the standby for this connection. Mar 18 2015 22:12:34: %ASA-6-302014: Teardown TCP connection 27554151 for outside:10.145.44.253/3389(LOCAL\statiajj) to identity:66.241.60.197/10994 duration 0:05:02 bytes 252687 TCP Reset-O Mar 18 2015 22:12:34: %ASA-6-302014: Teardown TCP connection 27554254 for outside:10.145.44.253/3389(LOCAL\statiajj) to identity:66.241.60.197/10994 duration 0:05:01 bytes 252687 TCP Reset-O We also see a lot of reset packets in asp drops in the standby ASA. 1: 19:00:25.358578 0000.0000.0000 0000.0000.0000 0x0800 Length: 54 66.241.60.197.62481 > 10.145.44.253.3389: R [tcp sum ok] 0:0(0) ack 0 win 0 (ttl 255, id 52738) Drop-reason: (mp-svc-no-channel) SVC Module does not have a channel for reinjection The interesting thing is the source MAC and the destination MAC is 0 in this ASP drop. We see overruns on the failover interface of the standby unit. stby/sec/alan3usv01# show int gig0/3 Interface GigabitEthernet0/3 "failover1", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps) Input flow control is unsupported, output flow control is off Description: LAN/STATE Failover Interface MAC address 5475.d091.518f, MTU 1500 IP address 10.99.101.114, subnet mask 255.255.255.248 432217782 packets input, 556229026142 bytes, 0 no buffer Received 556 broadcasts, 0 runts, 0 giants 204523310 input errors, 0 CRC, 0 frame, 204523310 overrun, 0 ignored, 0 abort And we see a lot of packets being transferred from active to standby ASA. In the failover debugs we only find the following messages in the debugs of fover rx. lu_rx: HA TRANS: receive message for client vpnfo, length 48 lu_rx: HA TRANS: receive message for client vpnfo, length 72 lu_rx: HA TRANS: receive message for client vpnfo, length 72 The CPU profiler points that the high CPU on the standby ASA is due to LU updates when we decode the CPU profile output from the standby ASA. Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(2), 9.1(5.21) Known Fixed Releases: * 100.11(0.62), 100.11(0.63), 100.12(0.142), 100.12(0.148), 100.13(0.106), 100.13(0.95), 100.14(0.71), 100.14(0.76), 100.14(16.8), 100.14(16.9) Alert Type: Updated * Bug Id: CSCuw57991 Title: Unable to configure standard ACL with host 0.0.0.0 entry Status: * Open Severity: * 2 Severe Description: Symptom: cannot enter the ACL in the below format access-list DEFAULT standard deny host 0.0.0.0 Conditions: ASA running 9.3.2 and above , using standard ACL Workaround: None Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.3(2), 9.3(3), 9.4(1) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuv87760 Title: Unicorn proxy thread traceback with RAMFS processing Status: Fixed Severity: 2 Severe Description: Symptom: Traceback in Unicorn Proxy Thread while using WebVPN. Conditions: Cisco ASA running release 9.3.3.223 with WebVPN enabled. Workaround: None. Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.3(3), 9.3(3.223) Known Fixed Releases: * 100.11(0.63), 100.12(0.148), 100.13(0.105), 100.14(0.76), 100.15(0.32), 100.15(16.7), 100.15(17.11), 100.15(3.57), 100.15(8.15), 100.16(0.2) Alert Type: Updated * Bug Id: CSCuw03419 Title: SPYD PIM BSR 1K mcast group UDP 64B PPS is 50% more lower than no PIM Status: Open Severity: 2 Severe Description: Symptom: SPYD PIM BSR UDP 64B PPS is 50% lower than without PIM Conditions: -Topology: Source-RP-router-(inside)ASA(outside)-destination client. Workaround: Do not use PIM Further Problem Description: N/A Last Modified: 08-OCT-2015 Known Affected Releases: * 9.4(1) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuv70932 Title: FO: ASAv crashed while syncing during upgrade from 9.4.1 to 9.5.1 Status: Fixed Severity: 2 Severe Description: Symptom: FO: ASAv crashed while syncing during upgrade from 9.4.1 to 9.5.1 Conditions: Upgrade from 9.4.1 to 9.5.1 with huge customer configuration. Workaround: Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.5(1) Known Fixed Releases: * 100.11(0.63), 100.12(0.148), 100.13(0.104), 100.14(0.76), 100.15(0.29), 100.15(1.95), 100.15(16.7), 100.15(17.10), 100.15(3.55), 100.15(8.15) Alert Type: Updated * Bug Id: CSCuw52966 Title: Port number service-object as string and digit - re-validation glitch Status: Fixed Severity: 2 Severe Description: Symptom: Current version of ASA Device package requires port numbers specified in digit for ex. for HTTP port digit is 80. Conditions: Above config is pushed correctly to ASA but ASA service-object appears with "string" as "http" instead of digit as "80". Now when device package will be re-validated, Device package reads the "80" as not compliant configuration based on L4-7 parameters string "http" configured. In turn, on ASA device there will an addition and deletion of same service-object will happen. Workaround: None Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 1.2(3.4) Known Fixed Releases: * 1.2(3.6) Alert Type: Updated * Bug Id: CSCun66179 Title: ASA558560 traceback tmatch_release+46 spin_lock.h:317 in cps IPV6 tests Status: Fixed Severity: 2 Severe Description: * Symptom: ASA558560 traceback tmatch_release+46 spin_lock.h:317 in cps IPV6 tests Conditions: TCP IPv6 connectino per second tests Workaround: N/A Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 100.8(66.4) Known Fixed Releases: * 100.10(9.6), 100.11(0.3), 100.7(6.130), 100.8(38.128), 100.8(40.65), 100.8(56.34), 100.8(63.2), 100.8(64.7), 100.8(65.4), 100.8(66.7) Alert Type: Updated * Bug Id: CSCuw26991 Title: ASA: Traceback in Thread Unicorn Admin Handler due to Threat Detection Status: Fixed Severity: 2 Severe Description: Symptom: ASA device traceback in Unicorn Admin Handler possibly due to Threat Detection configured on the ASA device Conditions: ASA device configured with Threat Detection Workaround: Disabling the Threat Detection is a possible workaround for this issue Further Problem Description: None. PSIRT Evaluation: The Cisco PSIRT has evaluated this issue and does not meet the criteria for PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Last Modified: 05-OCT-2015 Known Affected Releases: 9.3(2.2), 9.4(1) Known Fixed Releases: * 100.12(0.150), 100.13(0.110), 100.14(0.78), 100.15(0.45), 100.15(17.20), 100.15(3.69), 100.15(8.17), 100.16(0.3), 100.16(1.6), 99.1(3.178) Alert Type: Updated * Bug Id: CSCuw12844 Title: ASAv: Support for VFAT config_drive_format in openstack Status: Fixed Severity: 2 Severe Description: Symptom: ASAv not able to load config file at the time of instantiation with config-drive format VFAT in openstack Conditions: Openstack provides options to append a config file to ASAv and put it into config-drive and made available to VM. There are two config drive options in openstack: ISO9660 VFAT With "ISO9660" format this takes the form of virtual CDROM. This is supported currently in ASAv. With "VFAT" format this takes the form of virtual disk drive. This is not supported currently in ASAv. Workaround: None Further Problem Description: Openstack provides options to append a config file to ASAv and put it into config-drive and made available to VM. There are two config drive options in openstack: ISO9660 VFAT With "ISO9660" format this takes the form of virtual CDROM. This is supported currently in ASAv. With "VFAT" format this takes the form of virtual disk drive. This is not supported currently in ASAv. This was fixed as part of DDTS below and integrated into multiple releases. http://cdetsweb-prd.cisco.com/apps/dumpcr?identifier=CSCuu86317&parentprogram=QDDTS. Other commits have broken the fix. Last Modified: 05-OCT-2015 Known Affected Releases: 9.4(1.202), 9.5(1.200) Known Fixed Releases: * 100.14(0.76), 100.14(16.9), 100.14(5.33), 100.15(0.34), 100.15(16.8), 100.15(17.12), 100.15(3.60), 100.15(8.15), 100.16(0.2), 100.16(1.2) Alert Type: Updated * Bug Id: CSCut71095 Title: ASA WebVPN clientless cookie authentication bypass Status: Fixed Severity: 2 Severe Description: Symptom: In some instances, the ASA WebVPN clientless session ID is included the URL. Session ID's should only be stored in cookies and transmitted over secure channels. Conditions: -- WebVPN Workaround: none Further Problem Description: PSIRT Evaluation: The Cisco PSIRT has evaluated this issue and does not meet the criteria for PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Last Modified: 31-OCT-2015 Known Affected Releases: 9.1, 9.4(1) Known Fixed Releases: * 100.12(0.130), 100.13(0.118), 100.13(0.80), 100.13(29.28), 100.14(0.44), 100.14(0.82), 100.14(16.1), 100.14(5.21), 100.14(7.41), 100.15(0.16) Alert Type: Updated * Bug Id: CSCut18736 Title: ASA crashes after clear configure all command Status: Fixed Severity: 3 Moderate Description: Symptom: ASA crashes after "clear configure all" command is configured Conditions: Workaround: Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.3(2.202) Known Fixed Releases: * 100.11(0.63), 100.12(0.150), 100.13(0.111), 100.14(0.78), 100.15(0.48), 100.15(17.20), 100.15(3.71), 100.15(8.17), 100.16(0.3), 100.16(1.7) Alert Type: Updated * Bug Id: CSCuv95320 Title: ASA User Ident MAC mismatch remove command not applied Status: Fixed Severity: 3 Moderate Description: Symptom: -"no user-identity action mac-address-mismatch remove-user-ip" will be applied in the running-config -Users will disappear from CDA (if in use) -When users query whoami.scansafe.net, they may return their IP address where their username should be -When "debug user-ident user" and "debug user-ident ad-agent" are applied, the following log messages will appear: Dispatch Unit: NP IDFW: mac addr changed since last request for ip 192.168.17.102 Dispatch Unit: NP IDFW: remove ip 192.168.17.102 from user JoeUser domain=1 uid=164 import=0 useripcnt=1 hashcnt=223 Dispatch Unit[0]: IP-User mapping 192.168.17.102(0)<->unity\JoeUser removed Conditions: Unknown. First ASA found with this issue is a ASA5510 running asa915-k8.bin. Workaround: Reloading the ASA has been shown to resolve the issue in previous lab testing. re-apply user-identity action mac-address-mismatch remove-user-ip no user-identity action mac-address-mismatch remove-user-ip Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(5) Known Fixed Releases: * 100.11(0.63), 100.12(0.147), 100.13(0.102), 100.14(0.75), 100.15(0.28), 100.15(1.92), 100.15(16.5), 100.15(17.7), 100.15(3.51), 100.15(8.14) Alert Type: Updated * Bug Id: CSCuv34202 Title: ASA5545 9.1.6.6 Flowcontrol not working. No pause frames sent Status: Open Severity: * 3 Moderate Description: Symptom: ASA5545 9.1.6.6 is not sending XON pause frames Conditions: High volume of inbound traffic triggering interface overruns Workaround: Enable auto-negotiation and set the 'flowcontrol received desired' (or equivalent) on the link partner. This will allow the pause resolution to occur properly during the auto-negotiation process and enable the transmission of pause frames from the ASA. Further Problem Description: Last Modified: 28-OCT-2015 Known Affected Releases: 9.1(6.6) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuw34664 Title: Inconsistent ospf network added/removed by asa device package Status: Fixed Severity: 3 Moderate Description: * Symptom: 1. Existing OSPF network configuration may be removed on ASA when new service graph is applied. 2. Existing OSPF network configuration may be removed on ASA when a service graph is removed though the ASA interface is still being used by other service graphs. 3. When removing a service graph, the interface config may not be always un-configured though there is no more service graph sharing the interface. Conditions: ASA integration with ACI and runs in L3 routed mode with OSPF being the routing protocol. ASA has multiple sub-interfaces forming L3out to ACI fabric, with each sub-interface in a separate context. Workaround: Re-validation of L4/7 device to force a re-sync of the configuration. Further Problem Description: Last Modified: 04-OCT-2015 Known Affected Releases: 1.2(3.4) Known Fixed Releases: 1.2(3.5) Alert Type: New Bug Id: CSCuw52518 Title: Cluster: CCL ICMP error (with icmp payload) loop with through VPN tunnel Status: Open Severity: 3 Moderate Description: Symptom: The icmp error (with icmp payload) loop is seen on ASA L2 cluster. The Traffic that triggers the loop is the ICMP error pkt (with icmp as payload) that should be sent over a site to site VPN tunnel. The packet is looping on the cluster control link between the master and slave units. Conditions: Workaround: Further Problem Description: Last Modified: 04-OCT-2015 Known Affected Releases: 100.8(40) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuj49205 Title: SNMP: OID(1.3.6.1.4.1.99.X) inadvertently added Status: Fixed Severity: 3 Moderate Description: * Symptom: SNMP Object Navigator and Adaptive Security Appliance MIB Support List does not reflect OID(1.3.6.1.4.1.99.X). Conditions: The output of "show snmp-server oidlist" from version 8.2.1 or later reflects OID(1.3.6.1.4.1.99.X). This OID is not supported. Workaround: None Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 8.2(1) Known Fixed Releases: * 100.10(0.30), 100.10(1.21), 100.10(2.1), 100.10(9.1), 100.8(38.55), 100.8(40.36), 100.8(45.7), 100.8(46.28), 100.8(52.2), 100.9(10.13) Alert Type: Updated * Bug Id: CSCuu99349 Title: ASA-3-317012 and "No route to host" errors even though the route exists Status: Fixed Severity: 3 Moderate Description: Symptom: Certain sequence of configuration steps can lead to errors: %ASA-3-317012: Interface IP route counter negative - Management0/0 and No route to host when traffic is sent from the ASA to a remote IP address and a valid route exists to reach the destination. Conditions: This was found in transparent firewall mode in 9.3(2). Workaround: This is a rare situation. Reboot the ASA. Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 9.3(2) Known Fixed Releases: * 100.11(0.61), 100.12(0.132), 100.13(0.82), 100.14(0.61), 100.14(16.1), 100.14(5.24), 100.14(7.45), 100.15(1.26), 100.15(19.1), 100.15(2.58) Alert Type: Updated * Bug Id: CSCuv72826 Title: object-group-search access-control enabled, nested object group issue Status: Fixed Severity: 3 Moderate Description: Symptom: asa denied traffic after moving an group object to another group object Conditions: object-group-search access-control enabled Workaround: reapply access-list to the interface Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 9.1(6), 9.2(3), 9.4(1) Known Fixed Releases: * 100.12(0.148), 100.13(0.105), 100.14(0.76), 100.15(0.31), 100.15(16.7), 100.15(17.11), 100.15(3.56), 100.15(8.15), 100.16(0.2), 100.16(1.2) Alert Type: Updated * Bug Id: CSCuv88898 Title: WEBVPN Rewriter: Stops mangling after hex code of Period on Bookmark URL Status: Fixed Severity: 3 Moderate Description: * Symptom: When the hex code of the characters on a URL is used on the bookmark for Clientless webvpn, the URL mangling stops after the Hex equivalent of "period" is seen. For example : For http://www.cisco.com we use "http://www.cisco.com" The mangled URL looks like this https://ASA IP/+CSCO+0h756767633A2F2F6A6A6A++/.cisco.com The mangling stops at . which is the Hex equivalent for "period" Conditions: HEX code is used on the Bookmark URL Workaround: None Further Problem Description: Last Modified: 14-OCT-2015 Known Affected Releases: 9.4(1.3) Known Fixed Releases: 100.11(0.63), 100.12(0.148), 100.13(0.106), 100.14(0.76), 100.15(0.39), 100.15(17.14), 100.15(3.63), 100.15(8.16), 100.16(0.2), 100.16(1.3) Alert Type: Updated * Bug Id: CSCuw44582 Title: ASA1000V error ASA-4-418001 & ASA-3-106014 even not destined to itself Status: Open Severity: 3 Moderate Description: * Symptom:ASA1000V reports deny syslog such as ASA-4-418001 and ASA-3-106014 Conditions:ASA1000V receives packets with destination mac-address being not the ASA itself Workaround:There is no known workaround. More Info:Switch typically floods unicast packets if the destination MAC do not exist on its mac address-table. It is known that VMware vswitch do not do flooding but the Cisco Nexus 1000V does. To disable unicast flooding of Nexus 1000V, enable its feature called UUFB. Last Modified: 15-OCT-2015 Known Affected Releases: 8.7(1.16), 8.7(1.8) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCur46371 Title: TLSv1.2 Client Cert Auth Connection Establishment Failure Status: Fixed Severity: 3 Moderate Description: Symptom: Connection establishment failure only for TLS 1.2 using ECDSA in client mode, so ASA connecting out to an SSL server with certificate authentication configured. Conditions: ASA connecting out to an SSL server with certificate authentication configured. Workaround: Do not configure certificate authentication on the SSL web server. Further Problem Description: Last Modified: 06-OCT-2015 Known Affected Releases: 100.13(15.11), 9.3(2) Known Fixed Releases: * 100.13(0.112), 100.14(0.78), 100.15(0.53), 99.1(3.178), 99.2(2.6) Alert Type: Updated * Bug Id: CSCus73422 Title: Close-overlay function not working thru rewriter Status: Fixed Severity: 3 Moderate Description: Symptom: Cannot close the overlay window using the X button Conditions: Opening an article Workaround: Use the back button on the browser and then open a new article Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(5.101) Known Fixed Releases: * 100.11(0.61), 100.12(0.134), 100.13(0.88), 100.14(0.67), 100.15(0.21), 100.15(1.36), 100.15(10.4), 100.15(2.75), 100.15(4.23), 100.15(5.27) Alert Type: Updated * Bug Id: CSCuv02619 Title: Standby ipv6 address setting is not replicated to standby Status: Fixed Severity: 3 Moderate Description: Symptom: Replicating of standby ipv6 settings is not replicated correctly. Conditions: In L2 firewall mode and multiple context mode. Workaround: 'write standby' twice on the active unit. Further Problem Description: none Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(6.6) Known Fixed Releases: * 100.11(0.61), 100.12(0.136), 100.13(0.90), 100.14(0.67), 100.15(0.21), 100.15(1.40), 100.15(10.4), 100.15(15.4), 100.15(4.24), 100.15(8.9) Alert Type: Updated * Bug Id: CSCuw36581 Title: * ASA5585 ASA-3-402148: CRYPTO: Random Number Generator error Status: Open Severity: 3 Moderate Description: * Symptom: ASA-3-402148: CRYPTO: Random Number Generator error is observed on the ASA Conditions: ASA5585 Workaround: None Further Problem Description: Last Modified: 27-OCT-2015 Known Affected Releases: 9.1(2) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuu61981 Title: http servershows as enable in running config while not Status: Open Severity: 3 Moderate Description: Symptom: When configuration command "http server enable" fails due to port usage conflict with AAA with error message ERROR: Port 443 is being used on interface public by an aaa authentication listener", the configuration is incorrectly updated to include "http server enable". Conditions: When configuration "http server enable [port-number] is attempted but the designated port is already in use (e.g., by AAA). Workaround: remove the conflict configuration before "http server enable" Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.4(1) Known Fixed Releases: * 100.11(0.63), 100.12(0.149), 100.13(0.108), 100.14(0.77), 100.15(0.54), 100.15(17.23), 100.15(3.76), 100.8(40.102), 99.1(2.251), 99.1(3.178) Alert Type: Updated * Bug Id: CSCsl74827 Title: Error messages on console due to QoS configuration Status: Fixed Severity: 3 Moderate Description: Symptom: Due to QoS configuration on the ASA, errors like below might be seen on the console: Message #941 : ERROR: Problem with interface 8 Message #942 : ERROR: Problem with interface 9 Message #943 : ERROR: Problem with interface 10 It is believed that these errors are cosmetic, and do not indicate a problem with the operational state of the ASA. Conditions: QoS must be configured to encounter this problem Workaround: None known Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 8.0(2), 8.1(0.135), 9.4(1.3) Known Fixed Releases: * 100.11(0.63), 100.12(0.146), 100.13(0.100), 100.14(0.73), 100.15(0.26), 100.15(1.92), 100.15(16.5), 100.15(17.7), 100.15(3.51), 100.15(8.14) Alert Type: Updated * Bug Id: CSCua32157 Title: Remove Code for Type 0 Routing Headers Status: Fixed Severity: 3 Moderate Description: Symptom: This is a modification on the product to adopt new secure code best practices to enhance the security posture and resiliency of the product. Conditions: Device configured with default configuration. Workaround: Not applicable or available. PSIRT Evaluation: The Cisco PSIRT has evaluated this issue and does not meet the criteria for PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 8.2(4.5) Known Fixed Releases: * 100.11(0.62), 100.12(0.145), 100.13(0.98), 100.14(0.73), 100.15(0.26), 100.15(1.92), 100.15(16.5), 100.15(17.7), 100.15(3.54), 100.15(8.14) Alert Type: Updated * Bug Id: CSCua32176 Title: IPv6 Complete Packet Fragment Reassembly Check Bypass Status: Fixed Severity: 3 Moderate Description: Symptom: It is possible for a crafted IPv6 packet to bypass the fragment reassembly check of the Cisco Adaptive Security Appliance (ASA). Conditions: Cisco ASA configured for IPv6. Workaround: None. PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 4.3/4.3: http://tools.cisco.com/security/center/cvssCalculator.x?vector=AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:U/RC:C&version=2.0 CVE ID CVE-2012-5736 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 8.2(4.5) Known Fixed Releases: * 100.11(0.62), 100.11(0.63), 100.12(0.143), 100.12(0.146), 100.13(0.100), 100.13(0.95), 100.14(0.71), 100.14(0.73), 100.15(0.24), 100.15(0.26) Alert Type: Updated * Bug Id: CSCuu41142 Title: IPv6 local host route fail when setting link-local/Global simultaneously Status: Fixed Severity: 3 Moderate Description: Symptom: When configuring link local address and global address simultaneously by copy&paste from text editor, IPv6 local host route cannot be seen on "show ipv6 route". For example, assume trying to set 2001:1111:1111:111::1/128 as IPv6 address on interface, local host routing table of 2001:1111:1111:111::1/128 should be set but was not set in certain situation. ciscoasa/C1(config-if)# sh ipv6 route IPv6 Routing Table - 3 entries Codes: C - Connected, L - Local, S - Static O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 C 2001:1111:1111:111::/64 [0/0] via ::, outside L fe80::/10 [0/0] via ::, outside L ff00::/8 [0/0] via ::, outside The following local host routing should be set. L 2001:1111:1111:111::1/128 [0/0] via ::, outside Conditions: The symptom only occurs when changing link local address and global address simultaneously. Therefore, symptom does not occur when not changing link local address or configuring link local address and global address 1 line by 1 line. Workaround: - Configure link local address and global address 1 line by 1 line(Do not use copy&paste multiple lines) - Not change link local address when configuring global address Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(6) Known Fixed Releases: * 100.11(0.59), 100.12(0.128), 100.13(0.78), 100.13(21.16), 100.14(0.33), 100.14(5.17), 100.14(7.35), 100.15(0.14), 100.15(1.20), 100.15(2.53) Alert Type: Updated * Bug Id: CSCuw65183 Title: PBR set ip next-hop lost on boot if name configured for IP argument Status: Fixed Severity: 3 Moderate Description: * Symptom: "set ip next-hop" statement in ASA route-map disappears after reload Conditions: Occurs when a name to IP mapping exists for the address used as an argument in that "set ip next-hop" configuration. ie: If the "set ip next-hop" command referenced 192.168.1.1 and there was a config line of: name 192.168.1.1 WIN-PC Workaround: Delete the name to IP mapping for the IP address used in that command Further Problem Description: Last Modified: 25-OCT-2015 Known Affected Releases: 9.4(2), 9.5(1) Known Fixed Releases: * 100.13(0.118), 100.14(0.81), 100.15(0.69), 100.15(17.31), 100.15(20.11), 100.15(8.22), 100.16(0.6), 100.16(1.18), 99.1(3.185), 99.2(2.17) Alert Type: Updated * Bug Id: CSCuw40468 Title: DHCP proxy overrites chosen DHCP server in multiple DHCP server scenario Status: Fixed Severity: 3 Moderate Description: Symptom: Anyconncet clients stop connecting to the ASA because they are no longer able to get an address from the DHCP server. Conditions: - multiple DHCP servers configured on the ASA - either DHCP server is behaving incorrectly where it sees the REQUEST (with the other server's IP) and still replies with an OFFER, or the OFFER was sent by the non-selected DHCP server before it sees the REQUEST Workaround: configure only one DHCP server Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(5) Known Fixed Releases: * 100.11(0.63), 100.12(0.150), 100.13(0.110), 100.14(0.78), 100.15(0.44), 100.15(17.18), 100.15(3.68), 100.15(8.17), 100.16(0.2), 100.16(1.5) Alert Type: Updated * Bug Id: CSCuu88412 Title: When > 510 characters entered in CLI, context switches to admin/system Status: Fixed Severity: 3 Moderate Description: Symptom: When user exceeded 510 characters from the CLI and is not within the admin/system context, user is unintentionally switched into the "admin/system" context. This issues was observed when running the command on ASASM after first logging into the 6500 switch and performing a "session" connection to the module. Conditions: ASASM with v9.1.6.1 Workaround: none Further Problem Description: none Last Modified: 26-OCT-2015 Known Affected Releases: 9.1(6) Known Fixed Releases: * 100.13(0.118), 100.14(0.81), 100.15(0.73), 100.15(20.12), 100.15(8.23), 100.16(0.7), 100.16(1.20) Alert Type: Updated * Bug Id: CSCuj04699 Title: ASA WebVPN: Java Signer Certificate chain is incomplete with >3 CA Certs Status: Fixed Severity: 3 Moderate Description: Symptom: When the SSLVPN client accesses the Java plugins, ASA signs the plugin using the Java Signer Certificate, however the Certificate chain sent by the ASA does not include the entire chain. As per the standards, ASA should at least send Intermediate CA-1 + Intermediate CA-2 + Java Signer Certificate Instead we see the following chain: Intermediate CA-2 + Java Signer Certificate On PCs which have only Root-CA certificate installed in the Java Signer Store or OS Certificate store, Java flags the publisher as UNKNOWN Conditions: ASA is acting as SSLVPN Server with Java Trust-point configured to sign the Java plugins with a valid 3rd party Signer Certificate. And the Java signer certificate is issued by an Intermediate CA, which has two or more issuers in the hierarchy. In other words, we have: Root -- Intermediate CA-1 -- Intermediate CA-2 -- Java Signer Certificate Workaround: Install the whole CA Chain in the End PC's Certificate store or Java Signer CA Store. i.e. in this case the store should contain at least Root CA and Intermediate CA-1 Certificates. Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 8.2(5.41), 9.1(6) Known Fixed Releases: * 100.11(0.62), 100.12(0.140), 100.13(0.95), 100.14(0.70), 100.15(0.24), 100.15(1.56), 100.15(16.1), 100.15(2.86), 100.15(3.31), 100.15(6.19) Alert Type: Updated * Bug Id: CSCuv32789 Title: ASA using IKEv2 rejects more than 10 NAT_DETECTION_SOURCE_IP payloads Status: Fixed Severity: 3 Moderate Description: Symptom: Acting as the IKEv2 responder, ASA receives initial IKEv2 packet that contains more than 10 payloads for NAT_DETECTION_SOURCE_IP from initiator. ASA rejects the connection, enumarates 10 payloads and prints "INVALID_SYNTAX" afterwards. Conditions: -ASA acts as IKEv2 responder. -ASA receives more than 10 payloads for "NAT_DETECTION_SOURCE_IP" from the initator. Workaround: Use IKEv1 Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.2(2.8) Known Fixed Releases: * 100.11(0.62), 100.12(0.141), 100.13(0.95), 100.14(0.70), 100.15(0.24), 100.15(1.62), 100.15(16.1), 100.15(17.1), 100.15(3.36), 100.15(6.21) Alert Type: Updated * Bug Id: CSCtr84992 Title: Possible to add multiple identical lines under certificate maps Status: Fixed Severity: 4 Minor Description: Symptom: Identical config lines are allowed under crypto ca map Conditions: ASA 8.4.1 with crypto ca map Workaround: remove them manually Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 100.8(50.40), 8.4, 8.4(1) Known Fixed Releases: * 100.11(0.61), 100.12(0.135), 100.13(0.88), 100.14(0.67), 100.15(0.21), 100.15(1.37), 100.15(10.4), 100.15(15.2), 100.15(2.75), 100.15(4.23) Alert Type: Updated * Bug Id: CSCuw54577 Title: DOC: include information about conflicts with sandboxing in Apple Status: Open Severity: 4 Minor Description: * Symptom: This is a documentation bug to highlight the conflicts caused due to application sandboxing in MACs and also list all the known apps that affected by this problem. Conditions: n/a Workaround: n/a Further Problem Description: Last Modified: 06-OCT-2015 Known Affected Releases: 9.0, 9.1(4) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuv96380 Title: Failover uptime sync failure Status: Fixed Severity: 4 Minor Description: Symptom: ASAs running in Failover, Failover up time doesn't sync up to match on both the ASAs. Conditions: ASAs in failover with huge number of contexts in a multicontext setup.(108 context in my setup) Workaround: N/A Further Problem Description: Last Modified: 02-OCT-2015 Known Affected Releases: 9.1(4), 9.1(4.5), 9.1(6) Known Fixed Releases: * 100.12(0.148), 100.13(0.107), 100.14(0.77), 100.15(0.36), 100.15(17.12), 100.15(3.61), 100.15(8.15), 100.16(0.2), 100.16(1.2), 100.8(40.102) Alert Type: Updated * Bug Id: CSCua71298 Title: Help arp in context shows arp permit-nonconnected Status: Fixed Severity: 4 Minor Description: Symptom: Help arp in admin and user contexts shows arp permit-nonconnected entry, which is only available in system context. Conditions: Workaround: Further Problem Description: Last Modified: 10-OCT-2015 Known Affected Releases: 8.4(4.2) Known Fixed Releases: * 100.11(0.63), 100.12(0.149), 100.13(0.114), 100.14(0.79), 100.15(0.56), 100.15(17.24), 100.15(3.77), 100.16(1.9), 100.8(40.102), 99.1(3.180) Alert Type: New Bug Id: CSCuv93818 Title: ASA: Enabling REST-API agent shows debug enabled message. Status: Open Severity: 5 Cosmetic Description: Symptom: Debug is enabled (level=5). message is seen after enabling rest api agent on ASA. command: config# rest-api agent Conditions: >> ASA version above 9.3.2 >> rest api agent enabled. Workaround: NONE Further Problem Description: It is a cosmetic issue. Last Modified: 06-OCT-2015 Known Affected Releases: 9.3(2), 9.4(1) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCtw80509 Title: add "show resource usage summary count all 1" to show tech Status: Fixed Severity: 6 Enhancement Description: Symptom: Add "show resource usage summary count all 1" to the show tech. Conditions: This is a request to add "show resource usage summary count all 0" to the show tech output so more information regarding xlates, conns, inspects, syslogs, etc can be evaluated as part of the show tech snapshot. This information would also be helpful in diagnosing performance issues and would be useful to have as part of the show tech portion of the show crashinfo. Workaround: None Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 8.2 Known Fixed Releases: * 100.11(0.63), 100.12(0.148), 100.13(0.105), 100.14(0.76), 100.15(0.31), 100.15(16.7), 100.15(17.11), 100.15(3.57), 100.15(8.15), 100.16(0.2) Alert Type: New Bug Id: CSCuv90102 Title: ASA should never accept Cisco Manufacturing CA certificates Status: Open Severity: 6 Enhancement Description: Symptom: This is a modification on the product to adopt new secure code best practices to enhance the security posture and resiliency of the Cisco Adaptive Security Appliance (ASA). The ASA should not allow a Cisco Manufacturer Installed Certificate (MIC) to be added as a Certification Authority (CA) Trustpoint. Conditions: The following conditions which include AnyConnect VPN and ASA. - The AnyConnect phones are factory provisioned with identity certificates issued from a Cisco manufacturing CA. This is the Manufacturer Installed Certificate (MIC). - The ASA trustpoint is configured with the MIC certificate. The ASA is not configured for multi-factor authentication (certificate password) and uses certificates only. Workaround: Cisco recommends using MICs solely for Locally Signed Certificate (LSC) installation and not for continued use. Further Problem Description: Please refer to the Cisco documentation: http://www.cisco.com/web/about/security/intelligence/IP_Phone_Security_WP.html#Phone_Authentication Last Modified: 10-OCT-2015 Known Affected Releases: 9.4 Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuu61410 Title: DevPak - enable/disable monitor-interface configuration Status: Fixed Severity: 6 Enhancement Description: Symptom: The monitor-interface is not enabled by default in ASA HA configuration and there is no option to enable/disable monitor-interface for logical interfaces. Conditions: Workaround: Manually configure monitor-interface thru CLI. confirmed the command is not overwritten when new configuration is pushed onto ASA from devpak. but it will be removed when all logical interfaces are removed and added back. Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 1.2(0.26) Known Fixed Releases: * 1.2(3.6), 1.2(4.0) Alert Type: Updated * Bug Id: CSCuw51528 Title: DOC: Change the 'timeout floating-conn' command description Status: Fixed Severity: 6 Enhancement Description: * Symptom: Confirmed on ASA with the following routing protocols (RIP, EIGRP, OSPF) that 'timeout floating-conn' affects also dynamic routing protocols. The ASA command reference states the following: "When multiple static routes exist to a network with different metrics, the ASA uses the one with the best metric at the time of connection creation." This should be changed to: "When multiple static or dynamic routes exist to a network with different metrics, the ASA uses the one with the best metric at the time of connection creation." Relevant command reference sections: http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/T-Z/cmdref4/t1.html#pgfId-1569874 http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/command/reference/cmd_ref/t.html#wp1540870 Conditions: Workaround: Further Problem Description: Last Modified: 05-OCT-2015 Known Affected Releases: 9.4(1) Known Fixed Releases: Alert Type: Updated * Bug Id: CSCuq38206 Title: ENH: ASA show tech should include 'dir all-filesystems' Status: Fixed Severity: 6 Enhancement Description: Symptom: Enhancement to add 'dir all-filesystems' to show tech output Conditions: n/a Workaround: n/a Further Problem Description: Last Modified: 08-OCT-2015 Known Affected Releases: 9.1(5) Known Fixed Releases: * 100.11(0.63), 100.12(0.148), 100.13(0.105), 100.14(0.76), 100.15(0.31), 100.15(16.7), 100.15(17.11), 100.15(3.57), 100.15(8.15), 100.16(0.2) Alert Type: Updated * Bug Id: CSCum63371 Title: ENH: Allow configurable HMAC and encryption algorithms on ASA SSH server Status: Fixed Severity: 6 Enhancement Description: Symptom: The Cisco ASA SSH server is not configurable as to encryption and HMAC algorithms. Since 8.4.4, certain versions are able to use the 'ssh key-exchange group' command to use different key exchange algorithms, but the encryption and HMAC algorithms are still not configurable. Some customers claim that this is causing them to fail security audits. Conditions: Normal operation Workaround: None Further Problem Description: This issue is addressed in 9.1(7) with the introduction of the "ssh cipher encryption" and "ssh cipher integrity" config commands. Last Modified: 30-OCT-2015 Known Affected Releases: 9.2(1), 9.2(3.4) Known Fixed Releases: * 100.15(20.13), 100.15(8.24), 100.16(1.26), 100.8(40.103), 9.1(6.102), 99.2(2.21) Alert Type: Updated * Bug Id: CSCuw52982 Title: ASA Configuration parameters under Service Graph or Function Profile Status: Fixed Severity: 6 Enhancement Description: Symptom: command " dns domain-lookup interface-name" can not be configured in Baseline from ASA Device Pkg Parameter since Interface configuration is being pushed from SG while CLI requires "interface-name" to be specified. This configuration is currently not supported. Conditions: It should be configurable under function profile or service graph. So manual configuration can be avoided from ASA before APIC can push parameters using ASA Dev Pkg. Workaround: Work Around - Manually login to ASA after SG configures those interfaces that are needed with "dns domain-lookup" configuration CLI Further Problem Description: Last Modified: 07-OCT-2015 Known Affected Releases: 1.2(3.4) Known Fixed Releases: * 1.2(3.8) Find additional information in Bug Search index.   2013 Cisco and/or its affiliates. All rights reserved. Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks