CISCO ASA 5506-X BUGS !

[thierrymasson]

Hi,

I have a Cisco ASA 5506-X from a few month ago now.

Some (know) weighty bugs has not been resolved until today !

- ASDM not usable (under Windows 10) with a release of JAVA higher than 8.51 ! (so it's a security issue that we can't update to the last version for the OS)

- ASDM/Firepower are unstable !!! (sometime we need to close the windows/end task) and reopen ASDM

- The most annoying is the firewall sometimes HANG ! About each 1 or 2 week of functionning I need to restard the device !

> Internet sudently very slow

> Can't access ASDM any more "ASDM unable to load the firewall configuration" (https://tools.cisco.com/bugsearch/bug/CSCuw54048/ ?)

> Trying to access from other computer = same issue

> Event in console, the ASA is very slow, trying to reload the SFR module (I suspect the SFR module to be the cause of this) cause a complete crash with a dump and then, a complete reboot of the ASA !

- We are still waiting for IPv6  DHCPD....

Realy Cisco.... what are you doing !!! we are not playing here with "end customer product", but with professionnal product !

We need stable product, functional product, and a SERVICE !

How can we contact you ??? (your add device not working https://cway.cisco.com/mydevices/list), so I can't add my device, so I can't open ticket, so I have no way to have support !!!!

Trying to use your support case : https://tools.cisco.com/ServiceRequestTool/scm/mgmt/contract

> NOT working (I'm blocked on the serial witch is not recognized...I don't know why ???)

WHAT WE DO !!!!

I'm getting tired of Cisco products.

[thierrymasson]

I forgot to mention that the ASA has obviously all the last update !

- ASA 9.4.3

- ASDM 7.6.1

- Firepower 6.0.1 (6.0.1-29)

[thierrymasson]

HELLOOOOO CISCO....IS SOMEBODY THERE !!!!!!

CISCO TEAM : COUL'D YOU MOVE YOUR ASS AND DO YOUR JOB PLEASE ???????????

1.) MAKE STABLE PRODUCT....(need firmware update)

2.) MAKE COMPATIBILITY WITH Windows 10 and the last JAVA

3.) UPDATE MISSING FUNCTIONNALITY (IPV6 DHPC-PD)

4.) and many others...

Month and month pass away, and still no solution !!!!

I think I will never buy CISCO again, and go to FORTINET !

YOU SERVICES IS A PITY !

[marce1000]

 - You are shouting on a public forum; which isn't an official cisco support channel. If you need cisco support contact TAC.

M.

[thierrymasson]

Hi,

I'm souting it on this public forum, because as explained in my first post, at the end, I have no solution to contact Cisco (I can't open a TAC without subscibing a "support" contract !).

Or, I refuse to paid to solve BUGS for a product in WARRANTY ! (I think it's understandable).

That's why I made this post in this forum.

As this, I hope many people saw the poor after sales of CISCO !

Best regards,

[avrie]

Just purchased a 5506-X which must replace my 5505 (which replaced a PIX).
Until now, never have real problems with Cisco products.

Already experienced a few of mentioned points with 5506-X:

• ASDM failing under Windows 10, after a few hours of searching indeed downgraded to java 8u51
• ASDM not stable
• USB not working, could be Windows 10 issue also (although device manager gives no error)
• Old firmware and old Firepower (5.4) on delivery, but this is (probably) a stocking issue (could be distribution)
• Failed to upgrade to 6.0 (ui:[62%] Running script 800_post/150_install_infodb.sh)
• After a long process of Re-Image and Re-install 6.0 succeeded
• Also on clean install, failed to upgrade both 6.0.0.1-26 and 6.0.1-29 (200_pre/009_check_snort_preproc.sh)

Experiences with Cisco TAC so far:

• Reported upgrade problems to 6.0 on 13th of june
• Issues inserting Smart contract due to company mismatch, so case accepted on 23th of june
• On 24th of june the engineer suggested to re-image and re-install
• Today, 28th of june, still not having an updated ASA and spent a LOT of time

[thierrymasson]

Hi,

I'm agree (unfortunately) with you in so many point !

• ASDM failing under Windows 10, after a few hours of searching indeed downgraded to java 8u51 > TRUE
  
• ASDM not stable > TRUE
  
• Old firmware and old Firepower ...on delivery... > TRUE : SPENT MANY HOURS TO RE-IMAGE ALL !
  
• After a long process of Re-Image and Re-install 6.0 succeeded > TRUE : VERY LONG AND PAINFULL !
  
• Today, 28th of june, still not having an updated ASA and spent a LOT of time : TRUE !
  

Personally, I'm tired of Cisco products !

[avrie]

I do not recommend or discourage anyone to use this product.
Every brand and every device has it's own flaws and bugfree software doesn't exist.

Could only share my experiences so far, they've been better (:

[thierrymasson]

Agree (I was a little bit nervous when I write that...I have edit the post to correct-it).

But... as Cisco know about this bugs from about 6 months now, this is absolutly not normal !

[avrie]

For unknown reasons, after again a new re-image (and re-install), same procedure as before, everything went smoothly. A workday is not enough updating to the latest firepower (on a clean and non-production unit).

• Patch 6.0.0.1-26 in 2h11
• Hotfix 6.0.0.999-1 in 0h45
• Patch 6.0.1-29 in 1h10
• Patch 6.0.1.1-24 in 5h08!!

Unfortunately, the Cisco TAC engineer has been very quiet since 24th.