THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.
|Affected Product ID
||Continues msg. in logs about loading user_ip_map.snapshot file|
ASA5500-X security appliances that run FirePOWER software v184.108.40.206 might experience accelerated wear of the solid-state drive (SSD).
ASA5500-X security appliances with FirePOWER Services that run FirePOWER software v220.127.116.11 might experience excessive log activity that can reduce the expected life span of the solid-state drives.
The accelerated SSD wear issue affects only ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X, and ASA5555-X security appliances that run FirePOWER software v18.104.22.168. The expected life span of SSDs in other Cisco security platforms that run FirePOWER software v22.214.171.124 is not affected.
For additional information, see Software Advisory for CSCvb26230.
Because of the accelerated wear of the SSD, the ASA5500-X security platform might experience failures to load during reboot, reload, or upgrade operations.
Cisco recommends that you upgrade the FirePOWER software and run the SSD Life Expectancy Tool in order to identify affected ASA5500-X security platforms.
Step 1. Upgrade the FirePOWER software
If the ASA5500-X security platform currently runs FirePOWER software v126.96.36.199, apply the Cisco Network Sensor Hotfix DK (FirePOWER v188.8.131.52) to the security appliance.
Go to Cisco Software Central and download FirePOWER v184.108.40.206 from this path: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," select software version 220.127.116.11. FirePOWER v18.104.22.168 is listed with filename "Cisco_Network_Sensor_Hotfix_DK-22.214.171.124-1.sh" and is available for customers with a valid service contract.
Note: Install the software during a scheduled maintenance window because the upgrade causes a brief traffic disruption.
Step 2. Install and run the SSD Life Expectancy Tool
Refer to the "How to Identify Affected Products" section of this article in order to determine if the expected life span of your SSD(s) has been affected by this issue.
Complete the Upgrade Program form in this Field Notice in order to request replacements for affected SSDs. Be sure to provide the required information for each affected ASA5500-X model that is shown in the Upgrade Program form:
- Copy the "Number of drives" output by the SSD Life Expectancy Tool into the "Affected Product Quantity" field of the Upgrade Program form.
- Copy the "Serial Number(s)" output by the SSD Life Expectancy Tool into the "Affected Serial#" field of the Upgrade Program form.
- Copy the entire output of the SSD Life Expectancy Tool into the "Notes" field of the Upgrade Program form.
Refer to the ASA5500-X Hardware Installation Guide for instructions on SSD removal and installation.
How To Identify Affected Products
Perform this procedure in order to determine if the expected life span of the ASA5500-X SSD(s) is affected.
- Go to Cisco Software Central and download the SSD Life Expectancy Tool from this path: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," select software version 126.96.36.199. The SSD Life Expectancy Tool is listed with filename "release_duration_tool.tar" and is available without a support contract for Cisco registered customers.
- Follow the Release Note instructions for installation and use of the SSD Life Expectancy Tool.
- The ASA5500-X SSD(s) are eligible for replacement if the SSD Life Expectancy Tool indicates that the expected life span of the SSD(s) has been affected.
Note: Return of affected SSD(s) to Cisco is not required. Follow local guidelines on how to recycle electronic materials.
A Form must be filled out for each separate Ship to Address.
The Upgrade Order Reference Number should be unique for each time the Form is filled out.
Please enter a valid Serial Number in the Form.
You will receive an acknowledgement email immediately after submitting the Form with Request #. Depending on material availability, both you AND the Customer email address will receive a confirmation email with Order# in 7 to 10 days. UMPIRE orders are proactive replacements and do NOT adhere to normal SLAs or Service Contracts.
NOTE: If your Ship to Address is in the following countries, please expect delays of up to 3 months depending on importation regulations: Argentina, Brazil,, Columbia, Mexico, Venezuela, India, All countries in Asia (ei: Singapore, Malaysia, Hong Kong, China, Vietnam, Korea, Thailand, Philippines), and all non-EU countries (ie: UAE, Russia, Turkey). You will receive your Order# at that time. Thank you for your patience as this process is beneficial for the customer; it will save them the cost of vat/duty in these countries (which is very high).
If you were given a Sales Order Number for the shipment of your replacement parts, please refer to the SO Status Tool (Please note: you must have a CCO User ID and Password to access this site):https://cisco-apps.cisco.com/cisco/psn/commerce
If you were given an RMA Number for the shipment of your replacement parts, please refer to the "Service Order QuickSearch" Tool at the following location (Please note: you must have a CCO User ID and Password to access this site):http://tools.cisco.com/support/serviceordertool/home.svo
If you have not received an email with an Order# after 10 days, please send an email with your Request#(s) and Customer in the Subject line to:mailto:firstname.lastname@example.org
If you were given a Sales Order Number for the shipment of your replacement parts, please refer to the SO Status Tool (Please note: you must have a CCO User ID and Password to access this site): https://cisco-apps.cisco.com/cisco/psn/commerce
Note: Fields marked with an asterisk (*) are required fields.
For More Information
If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:
Receive Email Notification For New Field Notices
Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.