Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended

Available Languages

Updated:January 7, 2021
Document ID:FN70050

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision Publish Date Comments
1.0
22-Dec-17
Initial Release
1.1
07-Jan-21
Updated the Workaround/Solution Section and Removed the Upgrade Program Section

Products Affected

Affected Product ID Comments
ASA5512-FPWR-K8
ASA5512-FPWR-K9
ASA5512-FPWR-BUN
ASA5515-FPWR-K8
ASA5515-FPWR-K9
ASA5515-FPWR-BUN
ASA5525-FPWR-K8
ASA5525-FPWR-K9
ASA5525-FPWR-BUN
ASA5525-FTD-K9
ASA5545-FPWR-K8
ASA5545-FPWR-K9
ASA5545-FPWR-BUN
ASA5545-FTD-K9
ASA5555-FPWR-K8
ASA5555-FPWR-K9
ASA5555-FPWR-BUN
ASA5555-FTD-K9

Defect Information

Defect ID Headline
CSCvb26230 Continues msg. in logs about loading user_ip_map.snapshot file

Problem Description

ASA5500-X security appliances that run FirePOWER software v5.4.0.9 might experience accelerated wear of the solid-state drive (SSD).

Background

ASA5500-X security appliances with FirePOWER Services that run FirePOWER software v5.4.0.9 might experience excessive log activity that can reduce the expected life span of the solid-state drives.

The accelerated SSD wear issue affects only ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X, and ASA5555-X security appliances that run FirePOWER software v5.4.0.9. The expected life span of SSDs in other Cisco security platforms that run FirePOWER software v5.4.0.9 is not affected.

For additional information, see Software Advisory for CSCvb26230.

Problem Symptom

Because of the accelerated wear of the SSD, the ASA5500-X security platform might experience failures to load during reboot, reload, or upgrade operations.

Workaround/Solution

Cisco recommends that you upgrade the FirePOWER software and run the SSD Life Expectancy Tool in order to identify affected ASA5500-X security platforms.

Step 1. Upgrade the FirePOWER software

If the ASA5500-X security platform currently runs FirePOWER software v5.4.0.9, apply the Cisco Network Sensor Hotfix DK (FirePOWER v5.4.0.10) to the security appliance.

Go to Cisco Software Central and download FirePOWER v5.4.0.10 by navigating this path in Cisco Software Central: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," choose software version 5.4.0.9. FirePOWER v5.4.0.10 is listed with filename "Cisco_Network_Sensor_Hotfix_DK-5.4.0.10-1.sh" and is available for customers with a valid service contract. It is recommended to install the software during a scheduled maintenance window because the upgrade causes a brief traffic disruption.

Note: Reference the Cisco Firepower Compatibility Guide for guidance on upgrading your security appliance to later versions of FirePOWER software.

Step 2. Install and run the SSD Life Expectancy Tool

Perform this procedure in order to determine if the expected life span of the ASA5500-X SSD(s) is affected.

  1. Go to Cisco Software Central and download the SSD Life Expectancy Tool by navigating this path in Cisco Software Central: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," choose software version 5.4.0.9. The SSD Life Expectancy Tool is listed with filename "release_duration_tool.tar" and is available without a support contract for Cisco registered customers.
  2. Follow the Release Note instructions for installation and use of the SSD Life Expectancy Tool.
  3. The ASA5500-X SSD(s) are eligible for replacement if the SSD Life Expectancy Tool indicates that the expected life span of the SSD(s) has been affected.

Step 3. Request a Return Material Authorization (RMA) for affected SSD(s) (ASA5500X-SSD120=) through your normal support process for Fix on Failure.

Step 4. Refer to the ASA5500-X Hardware Installation Guide for instructions on SSD removal and installation.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco