ASA 5505, new software downloading, with no contract / warranty.

agonzalezvaldes · ‎06-01-2015

Hi there!

We have two ASA 5505 appliances, running software version 9.2.2(4), with Security Plus licenses. We want to fix their vulnerabilities (CSCur23709, CSCug51375, and CSCus08101), related to POODLE and POODLE BITES bugs.

These appliances are not covered under an active warranty or contract at this time. Trying to download 9.2.3(3) software version to fix these problems, we contacted to Cisco TAC team, but we were referred to the Cisco Support Community (CSC) for self-support information; because the no-active warranty status.

Some idea how we can download this ASA 9.2.3(3) software version, being out of contract? What would be the required contract to add to be able to do that, if that is the case?

Thanks in advance for all your support.

Marvin Rhoads · ‎06-02-2015

The TAC is supposed to make a decision on a case by case basis to publish the image with the fix to customers whose equipment is neither under support contract nor warranty.

This policy is as described here. It helps if you have the relevant PSIRT handy to cite when calling the TAC.

You can buy a support contract for an ASA 5505 for no more than US$71 - that's the list price for a year's support. Part number CON-SNT-AS5BUNK9 is what you'd need. (If you have the loaded Security Plus bundle, the support contract part number would be CON-SNT-AS5SBK9 @ US$203/year.)

UPDATE - the policy I mentioned above is the general policy. The Security Advisory for this particular vulnerability states in part:

Customers Without Service Contracts

Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through Cisco Authorized partners, resellers, and distributors (authorized third-party vendors) but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC):

+1 800 553 2447 (toll free from within North America)
+1 408 526 7209 (toll call from anywhere in the world)
email: tac@cisco.com

Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. Customers without service contracts should request free upgrades through the TAC.

agonzalezvaldes · ‎06-02-2015

Marvin, thanks a lot for all your help; great value! We're on track already!