CVE-2016-1287 patch

[sylis30653]

How can i obtain the patch for the CVE-2016-1287 vulnerability?

We don't have a smartnet for this firewall so I can't start a TAC request.

[Marvin Rhoads]

For patches that address documented security vulnerabilities, you are entitled to open a TAC case even without Smartnet.

I've heard some people have had issues getting past the first line of phone screening, but insist on your entitlement and cite the Security Advisory here:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike

It states:

Customers Without Service Contracts

Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC):
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html

Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.

[sylis30653]

Thank you Marvin,

I have tried to open a TAC, but in the second stage of the process, I have been asked for the serialnumber or a smartnet. I can't skip this step. For that I called the support telephone in our country. But they wouldn't help me and suggest that I would open a thread on this support forum.

[Marvin Rhoads]

Sorry that they are giving your a hard time.

I would suggest that you call them back with your serial number. Explain you do not have Smartnet but are requesting support per the Security Advisory I linked.

You might try the USA TAC number if your local number isn't able to assist.

If you have a local Cisco partner / reseller, they should be able to help as well.