Cisco Smart Install Scanner and Cisco Smart Install service issues

[ReiM]

Hi, i recently detect some external IP(162.216.17.113, 80.85.84.59) attempted to perform Cisco Smart Install Scanner to my environment frequently.
I have some questions and hope someone can give advise to me.
 
1. Will Cisco performed Smart Install Scanner to client if client not requested? 


2. Is this kind of Smart Install Scanner activity legitimate?

3. If i blocked all Smart Install Scanner activity in my firewall, will it affected Smart Install service?


4. Cisco Smart Install services only applicable to switches? Does router have this feature?
 
Thank you.

[Leo Laohoo]

Please read:  Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability

[ReiM]

So if i blocked all Smart Install Scanner activity in my firewall, will it affected Smart Install service that install in my environment?

[Leo Laohoo]

---

@ReiM wrote:

So if i blocked all Smart Install Scanner activity in my firewall, will it affected Smart Install service that install in my environment?

---

Only in the firewall?  No, it is only half effective.  

Read the Security Bulletin very carefully.