Cisco ASA Interim Release Notes

 

The software images listed below are Interim releases.  They contain bug fixes which address specific issues found since the last Feature or Maintenance release.  The images are fully supported by Cisco TAC and will remain on the download site only until the next Maintenance release is available. If you do not have a specific problem which is resolved by an Interim release, we recommend that you use the Feature or Maintenance release images.

 

Important:  These images were not fully regression tested.  Each individual fix was unit tested, and the image has had a limited amount of automated regression testing to confirm a baseline of functionality.  Keep this testing status in mind if you decide to run them in a production environment.  We strongly encourage you to upgrade to a fully tested Maintenance or Feature release when it becomes available.

 

Revision:  Version 9.1(3)2 – 10/28/2013

Files:  asa913-2-smp-k8.bin

Defects resolved since 9.1.3:

 

CSCtg31077

DHCP relay binding limit of 100 should be increased to 500

CSCtg63826

ASA: multicast 80-byte block leak in combination with phone-proxy

CSCtw82904

ESP packet drop due to failed anti-replay checking after HA failovered

CSCub43580

Traceback during child SA rekey

CSCug33233

ASA Management lost after a few days of uptime

CSCug89590

Hostscan 3.1.03104 does not detect Kaspersky AV 6.0

CSCug97772

Watchdog due to access-list change during uauth

CSCuh12279

ASA: Data packets with urgent pointer dropped with IPS as bad-tcp-cksum

CSCuh21682

ASA traceback with less PAT with huge traffic

CSCui00618

ASA does not send Gratuitous ARP(GARP) when booting

CSCui01258

limitation of session-threshold-exceeded value is incorrect

CSCui06108

LU allocate xlate failed after Standby ASA traceback

CSCui12430

ASA: SIP inspection always chooses hairpin NAT/PAT for payload rewrite

CSCui19504

ASA: HA state progression failure after reload of both units in HA

CSCui20346

ASA: Watchdog traceback in DATAPATH thread

CSCui22862

ASA traceback when using "Capture Wizard" on ASDM

CSCui25277

ASA TFW doesn't rewrite VLAN in BPDU packets containing Ethernet trailer

CSCui36033

PP: VoIP interface fails replication on standby due to address overlap

CSCui38495

ASA Assert in Checkheaps chunk create internal

CSCui41794

ASA A/A fover automatic MAC address change causes i/f monitoring to fail

CSCui45340

ASA-SM assert traceback in timer-infra

CSCui51199

ASA 9.0.3 traceback related to data-path

CSCui55190

Failover cluster traceback while modifying object groups via SSH

CSCui55978

ASA 8.2.5 snmpEngineTime displays incorrect values

CSCui57181

ASA/IKEv1-L2L: Do not allow two IPsec tunnels with identical proxy IDs

CSCui61335

Traceback in Thread Name: DATAPATH-3-1281 Page fault: Address not mapped

CSCui61822

ASA 5585 - traceback after reconnect failover link and 'show run route'

CSCui63322

ASA Traceback When Debug Crypto Archives with Negative Pointers

CSCui65495

ASA 5512 - Temporary security plus license does not add security context

CSCui66657

Safari crashes when use scroll in safari on MAC 10.8 with smart-tunnel

CSCui70562

AnyConnect Copyright Panel and Logon Form message removed after upgrade

CSCui76124

ASA telnet limit reached 9.0.3

CSCui78992

ASA after fover may not flush routes for an active grp in active/standby

CSCui80059

ASA traceback in pix_startup_thread

CSCui80835

ASA drops packet as PAWS failure after incorrect TSecr is seen

CSCui85750

ASA SCH Inventory message incorrectly set at Severity 10

CSCui88578

Failure when accessing CIFS share with period character in username

CSCui91247

ASA does not pass calling-station-id when doing cert base authentication

CSCui94757

ASA tears down SIP signaling conn w/ reason Connection timeout

CSCui98879

Clientless SSL VPN:Unable to translate for Japanese

CSCuj00614

SNMP environmental parameters oscillate on 5512,25,45 and 5550 platforms

CSCuj06865

ASA traceback when removing more than 210 CA certificates at once

CSCuj08004

AnyConnect states: "VPN configuration received... has an invalid format"

CSCuj10559

ASA 5505: License Host limit counts non-existent hosts

CSCuj13728

ASA unable to remove ipv6 address from BVI interface

CSCuj16320

ASA 8.4.7 Multi Context TFW not generating any syslog data

CSCuj23632

Certificate CN and ASA FQDN mismatch causes ICA to fail.

CSCuj28701

ASA - Default OSPF/EIGRP route gone in Active unit

CSCuj28871

ASA WebVPN: Rewriter doesn't work well with Base path and HTTP POST

CSCuj34124

Sustained high cpu usage in Unicorn proxy thread with jar file rewrite

CSCuj34241

no debug all, undebug all CLI commands doesnt  reset unicorn debug level

CSCuj39069

ASA:"IKEv2 Doesn't have a proposal specified" though IKEv2 is disabled

CSCuj43339

Add X-Frame-Options: SAMEORIGIN to ASDM HTTP response

CSCuj44998

ASA drops inbound traffic from AnyConnect Clients

CSCuj51075

Unable to launch ASDM with no username/password or with enable password

CSCuj58096

Crypto chip resets with large SRTP payload on 5555