ASA series Firewall IKEV2 bug CSCue42170

[rakesh.shah]

HI 

we are using ASA version 9.8(1) .. which does not seems to be mentioned as affected release. [reference bug tracking at https://quickview.cloudapps.cisco.com/quickview/bug/CSCue42170  ]

But i want to ensure if anyone is already using this version 9.8 (1) along with IKEV2 and doing fine.. The reason being this is more recent release and might not have been evaluated for that bug. 

Appreciate if anyone who knows about this provides quick comment. Thank you

regards

Rakesh

=====

[Karsten Iwen]

I stopped using 9.8 some years ago. But I think I was using IKEv2 with some of the 9.8 releases successfully.

9.8.1 is ancient and full of bugs, also security-related. You should at least update to a more recent 9.8 release or even to something newer like a suggested 9.12.x release.

[rakesh.shah]

Thanks Kartsen, this is helpful. Our scenario is -- we are SaaS provider using PFsense device for VPN and wants to configure VPN with customer ASA having this 9.8.1 release using IKEV2. Afraid of hitting bug with non cisco device like PFsense.

Do you have any further recommendation given this used case? thanks again.

regards

Rakesh

====

[Karsten Iwen]

I'm also running PFsense on one system and have a VPN to my ASA for a couple of years running. Always with up-to-date ASA software. No problem here.