https://community.cisco.com/t5/network-security/asa-software-update/m-p/2907269#M415482 <P>Hello everyone,&nbsp;</P> <P>I Have an ASA5510 with version 9.2, but because of the IKE vulnerabilities&nbsp;<SPAN>CVE-2016-1287, I must ask.</SPAN></P> <P></P> <P>Is an update really necessary?</P> <P></P> <P>I do not have any configuration ralated to VPN's, am I still vulnerable?</P> <P></P> <P>thanks for your replies.</P> Fri, 21 Feb 2020 13:45:45 GMT Alejandro Alcantara 2020-02-21T13:45:45Z https://community.cisco.com/t5/network-security/asa-software-update/m-p/2907269#M415482 <P>Hello everyone,&nbsp;</P> <P>I Have an ASA5510 with version 9.2, but because of the IKE vulnerabilities&nbsp;<SPAN>CVE-2016-1287, I must ask.</SPAN></P> <P></P> <P>Is an update really necessary?</P> <P></P> <P>I do not have any configuration ralated to VPN's, am I still vulnerable?</P> <P></P> <P>thanks for your replies.</P> Fri, 21 Feb 2020 13:45:45 GMT https://community.cisco.com/t5/network-security/asa-software-update/m-p/2907269#M415482 Alejandro Alcantara 2020-02-21T13:45:45Z https://community.cisco.com/t5/network-security/asa-software-update/m-p/2907270#M415483 <P>If you do not have crypto map configured on the <G class="gr_ gr_66 gr-alert gr_gramm undefined Punctuation multiReplace" id="66" data-gr-id="66">ASA ,</G> then you are not affected.<BR /><BR />You can verify this by issuing the command:<BR />show run crypto map&nbsp;<BR /><BR />If you <G class="gr_ gr_220 gr-alert gr_spell undefined ContextualSpelling ins-del multiReplace" id="220" data-gr-id="220">dont</G> have crypto map mapped to interface then you are not affected.<BR /><BR />Ref:<BR />https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike</P> <P><BR />Regards,<BR />Dinesh Moudgil</P> <P>P.S. Please rate helpful posts.</P> Thu, 10 Mar 2016 17:17:26 GMT https://community.cisco.com/t5/network-security/asa-software-update/m-p/2907270#M415483 Dinesh Moudgil 2016-03-10T17:17:26Z