Cisco
ASA Interim Release Notes
The software
images listed below are Interim releases.
They contain bug fixes which address specific
issues found since the last Feature or Maintenance release. The images are fully supported by Cisco TAC
and will remain on the download site only until the next Maintenance release is
available. If you do not have a specific problem which
is resolved by an Interim release, we recommend that you use the Feature or
Maintenance release images.
Important: These images were not fully regression
tested. Each individual fix was unit
tested, and the image has had a limited amount of automated regression testing
to confirm a baseline of functionality.
Keep this testing status in mind if you decide to run them in a production
environment. We strongly encourage you
to upgrade to a fully tested Maintenance or Feature release when it becomes
available.
Revision: Version 9.6(1)10 – 08/10/2016
Files: asa961-10-smp-k8.bin
Defects resolved since 9.6(1)5:
|
GTP traceback at gtp_update_sig_conn_timestamp
while processing data |
|
|
Error Indication dropped with Null TID MBReq
dropped with no Ctrl F-TEID |
|
|
ASA OSPFv3 interface ID changes upon disabling/enabling failover |
Revision: Version 9.6(1)5 – 06/30/2016
Files: asa961-5-smp-k8.bin
Defects resolved since 9.6(1)3:
|
Packet captures cause CPU spike on Multi-Core platforms due to spin_lock |
|
|
ASA-SFR, ASA should attempt to join Cluster after SFR service
module up |
|
|
ASA: "Auto-Enable" feature not working with SSH
configured with PKF |
|
|
Add Asynchronous support for DHCP proxy |
|
|
9.6.1/QP - Traceback in appagent_async_client_send_thread |
|
|
Traceback in Thread: IPsec message handler |
|
|
HA: Number of interfaces mismatch after SFR module reload on
both units |
|
|
ASA WebVPN: Java Exception with Kronos
application |
|
|
ASDM detects a config change when dACL is pushed for Anyconnect
user |
|
|
ASA 9.1(6) traceback in webvpn-datapath : thread name "DATAPATH-2-1524" |
|
|
SIP call transfer fail due to differences b/w fixing CallId and Refer-To |
|
|
FO replication failed: cmd=no disable,
when disabling webvpn-cache |
|
|
ASA - Traceback in CP Processing
Thread During Private Key Decryption |
|
|
AAA: RSA/SDI unable to set new PIN |
|
|
ASA may stop responding to OSPF Hello packets |
|
|
Slow ASA OSPF interface transition from DOWN to WAITING after
failover |
|
|
ASA 9.1.6.4 traceback with Thread
Name: telnet/ci |
|
|
Memory leak in 112 byte bin when packet hits PBR and WCCP rules |
|
|
Kenton 9.5.1'boot system/boot config'
commands not retained after reload |
|
|
Error messages on console "ERROR: Problem with interface
" |
|
|
ASA traceback in threadname
ssh |
|
|
Allocated memory showing high (invalid) values |
|
|
Network command disappears from BGP after reload with name |
|
|
ASA QOS fails to classify packets between priority and best
effort queue |
|
|
ASA Tback when large ACL applied to
interface with object-group-search |
|
|
ASA: Page Fault traceback in DATAPATH
on standby ASA after booting up |
|
|
ASA capture type isakmp saving
malformed ISAKMP packets |
|
|
WebVPN rewrite fails for MSCA Cert enrollment page / VBScript |
|
|
Interfaces get deleted on SFR during HA configuration sync |
|
|
dynamic crypto map fails if named the same as static crypto map |
|
|
ASA Address not mapped traceback -
configuring snmp-server host |
|
|
ASA Access-list missing and losing elements Warning Message
enhancement |
|
|
ASA-2-321006 May be received invalidly when memory is not high |
|
|
ASA Cluster fragments reassembled before transmission with no
inspection |
|
|
ASA may Traceback with Thread Name:
cluster rx thread |
|
|
ASA may Traceback with Thread Name:
Unicorn Admin Handler |
Revision: Version 9.6(1)3 – 05/10/2016
Files: asa961-3-smp-k8.bin
Defects resolved since 9.6(1):
|
FIPS self test power on fails - fipsPostDrbgKat |
|
|
ASA traceback in Thread name DATAPATH
when handling multicast packet |
|
|
ASA: Traceback in Checkheaps |
|
|
ASA traceback in Unicorn Proxy Thread |
|
|
Primary and Secondary ASA in HA is traceback
in Thread Name:DataPath |
|
|
ASA 9.4.2 traceback in DATAPATH |
|
|
DAP: debug dap trace not fully shown after +1600 lines |
|
|
Traffic drop due to constant amount of arp
on ASASM |
|
|
Nat pool exhausted observed when enabling asp transactional-commit
nat |
|
|
DNS Reply Modification for Dual-Stack does not work as expected |
|
|
ASA using a huge dynamic ACL may cause Anyconnect
connectivity failures |
|
|
Traceback when unit joins cluster |
|
|
ASA traceback with SIP inspection and
SFR enabled in 9.5.2 |
|
|
ASA: MAC address changes on active context when WRITE STANDBY is
issued |
|
|
Smart tunnel does not work since Firefox 32bit version 43 |
|
|
ASA: Assert traceback in version 9.4.2 |
|
|
Traceback when drop is enabled with diameter inspection and tls-proxy |
|
|
STBY ASA does't pass traffic via
ASA-IC-6GE-SFP-B ifc after reload |
|
|
ASA traceback in thread name snmp after upgrade to 9.1(7) |
|
|
ASA Access-list missing and losing elements after configuration
change |
|
|
ASA reloads in thread name: DATAPATH while encrypting L2L packet |
|
|
ASA : Configuration not replicated on mate if standby IP is missing |
|
|
inspect ip-option is not allowing
"NOP" even when allowed |
|
|
Buffer overflow in RAMFS dirent
structure causing traceback |
|
|
ASAv sub-interface failing to send traffic with customised
mac-address |
|
|
Traceback in thread name idfw when modifying
object-group having FQDN |
|
|
Assert Traceback in Thread Name:
DATAPATH on clustered packet reassembly |
|
|
WebVPN FTP client failing with "Error contacting host"
message |
|
|
orignial master not
defending all GARP packets after cluster split brain |
|
|
ASA traceback when receive Radius
attribute with improper variable type |
|
|
Traceback in DATAPATH or Hi CPU usage due to Threat Detection |
|
|
Improve efficiency of malloc_avail_freemem() |
|
|
ASA clientless rewriter failure at 'CSCOPut_hash'
function |
|
|
ENH: ASAv should have a different
pre-loaded cert |
|
|
Active and Standby ASA use same MAC addr
with only active MAC configured |
|
|
ASA traceback in SSH thread |
|
|
infinite loop in JS rewriter state machine when return followed by var |
|
|
ASA Traceback and reload by strncpy_sx.c |
|
|
Intranet page does not load via WebVPN with JavaScript errors |
|
|
CSCOPut_hash can initiate unexepected
requests |
|
|
ASA AnyConnect CSTP Copyright message
changed improperly |