Cisco Cisco ASA 5585-X Adaptive Security Appliance
2
Release Notes for the Cisco ASA Device Package Software, Version 1.1.1(2) for ACI
OL-xxxxx-xx <required for IOS documentation>
Important Notes
Important Notes
•
You must preconfigure cluster units before registering them to the APIC. To configure an ASA
cluster, see the “ASA Cluster” chapter of the Cisco ASA Series General Operations CLI
Configuration Guide for instructions, at:
cluster, see the “ASA Cluster” chapter of the Cisco ASA Series General Operations CLI
Configuration Guide for instructions, at:
•
In a scenario where there are two identical graphs (identical interfaces) that have one BD with
multiple EPGs, it is not possible to support NAT because NAT cannot differentiate between
interfaces.
multiple EPGs, it is not possible to support NAT because NAT cannot differentiate between
interfaces.
•
When you delete NAT on one of the graphs or delete one of the graph instances, the ASA Device
Package cannot determine which one you want to delete, and it removes both.
Package cannot determine which one you want to delete, and it removes both.
Installing the Software
To install the ASA Device Package software, see the Cisco ASA Integration with the APIC Quick Start
Guide for instructions, at:
Guide for instructions, at:
Downloading the Software from Cisco.com
If you have a Cisco.com login, you can obtain the ASA Device Package image from the following
website:
website:
Open Caveats
If you are a registered Cisco.com user, view more information about each caveat using the Bug Search
at the following website:
at the following website:
The following table contains open caveats in ASA Device Package Version 1.1.1(2).
Caveat
Description
CSCuq27823
Failover WARNING messages for ASA data interfaces
CSCuq79514
Threat detection provisioning failures
CSCur00998
ASA DP configure incorrect mgmt IP for secondary failover unit
CSCur17676
ASA DP does not modify the access group of interface
CSCur10983
ASA DP should suppress standby IP, not configure fault