Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Field Notice: FN - 62678 - Change to The ASA Base Product ID Has Caused Confusion


February 07, 2007

NOTICE:

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.


Products Affected

Products Affected

ASA 5510 Security Appliance

ASA 5520 Security Appliance

ASA 5540 Security Appliance

ASA 5550 Security Appliance

Problem Description

An additonal -K8 was added to the original Base Product ID which can be observed by issuing the show version command via Command Line Interface (CLI). This change has caused confusion among customers.

The following is an example of the show version output with the added -K8 designation:

ciscoasa(config)# show version 

Cisco Adaptive Security Appliance Software Version 7.2(2) 

Compiled on Wed 22-Nov-06 14:16 by builders System image file is "disk0:/asa722-k8.bin" 
Config file at boot was "startup-config" 

ciscoasa up 48 days 22 hours 

Hardware: ASA5540-K8, 1024 MB RAM, CPU Pentium 4 2000 MHz 
Internal ATA Compact Flash, 64MB 
BIOS Flash AT49LW080 @ 0xffe00000, 1024KB 
.....

Background

The ASA security appliances were originally produced using the following Base Product IDs:

ASA5510

ASA5520

ASA5540

ASA5550

A change was made whereby a -K8 was added to the Base Product ID. There is no other change made to the security appliances in this regard. This change does not affect the functionality of the security appliances however it has caused some customer confusion.

Problem Symptoms

A -K8 was added to the security appliances' Base Product IDs in the manufacturing process and the IDs can be observed when one issues the show version command. This change does not affect the following situations as it does not change the functionality of the security appliances:

  1. The product has a 3DES/AES license installed - The added -K8 to the Base Product ID does not reflect or change the actual license features such as 3DES/AES status.

  2. The security appliances are used as a failover pair - One security appliance could have the -K8 designation while the other does not. They will operate normally in a failover setup.

Cisco is eliminating the -K8 from future ASA hardwares because of the customer confusion that it has caused.

Workaround/Solution

There are no workarounds or solutions because the functionality of the ASA platforms has not been affected.

Revision History

Revision

Date

Comment

1.0

07-FEB-2007

Initial Public Release

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.