According to this pdf:http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-xe-3se-3650-cr-book/sec-a1-xe-3se-3850-cr-book_chapter_0110.pdf It appears to me that any device running an image before Cisco IOS Release 15.1(1)T was capable ...