THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.
Updated the Workaround/Solution Section and Removed the Upgrade Program Section
|Affected Product ID
|Continues msg. in logs about loading user_ip_map.snapshot file
ASA5500-X security appliances that run FirePOWER software v220.127.116.11 might experience accelerated wear of the solid-state drive (SSD).
ASA5500-X security appliances with FirePOWER Services that run FirePOWER software v18.104.22.168 might experience excessive log activity that can reduce the expected life span of the solid-state drives.
The accelerated SSD wear issue affects only ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X, and ASA5555-X security appliances that run FirePOWER software v22.214.171.124. The expected life span of SSDs in other Cisco security platforms that run FirePOWER software v126.96.36.199 is not affected.
For additional information, see Software Advisory for CSCvb26230.
Because of the accelerated wear of the SSD, the ASA5500-X security platform might experience failures to load during reboot, reload, or upgrade operations.
Cisco recommends that you upgrade the FirePOWER software and run the SSD Life Expectancy Tool in order to identify affected ASA5500-X security platforms.
Step 1. Upgrade the FirePOWER software
If the ASA5500-X security platform currently runs FirePOWER software v188.8.131.52, apply the Cisco Network Sensor Hotfix DK (FirePOWER v184.108.40.206) to the security appliance.
Go to Cisco Software Central and download FirePOWER v220.127.116.11 by navigating this path in Cisco Software Central: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," choose software version 18.104.22.168. FirePOWER v22.214.171.124 is listed with filename "Cisco_Network_Sensor_Hotfix_DK-126.96.36.199-1.sh" and is available for customers with a valid service contract. It is recommended to install the software during a scheduled maintenance window because the upgrade causes a brief traffic disruption.
Note: Reference the Cisco Firepower Compatibility Guide for guidance on upgrading your security appliance to later versions of FirePOWER software.
Step 2. Install and run the SSD Life Expectancy Tool
Perform this procedure in order to determine if the expected life span of the ASA5500-X SSD(s) is affected.
- Go to Cisco Software Central and download the SSD Life Expectancy Tool by navigating this path in Cisco Software Central: Security/Firewalls/Next-Generation Firewalls (NGFW)/ASA 5500-X with FirePOWER Services/ASA 55xx-X with FirePOWER Services/FirePOWER Services Software for ASA. On the left sidebar under "All Releases," choose software version 188.8.131.52. The SSD Life Expectancy Tool is listed with filename "release_duration_tool.tar" and is available without a support contract for Cisco registered customers.
- Follow the Release Note instructions for installation and use of the SSD Life Expectancy Tool.
- The ASA5500-X SSD(s) are eligible for replacement if the SSD Life Expectancy Tool indicates that the expected life span of the SSD(s) has been affected.
Step 3. Request a Return Material Authorization (RMA) for affected SSD(s) (ASA5500X-SSD120=) through your normal support process for Fix on Failure.
Step 4. Refer to the ASA5500-X Hardware Installation Guide for instructions on SSD removal and installation.
For More Information
If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:
Receive Email Notification For New Field Notices
Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.