3 ms·

It's been a while since I've had to deal with Cisco IOS, but IIRC they were always good about releasing security fixes to anyone upon a TAC request. For used d

It's been a while since I've had to deal with Cisco IOS, but IIRC they were always good about releasing security fixes to anyone upon a TAC request. For used devices off support contract, security incidents were a great opportunity to get free updates.

sneak 6y ago
IIRC you needed a contract login to open TAC cases. I always just got copies of the .bins from friends who worked at places that had contracts. They didn't gate updates at that time by which model you bought, once you had access you could get firmware for anything Cisco.
- oasisbob 6y ago
  Phone or email would work too, no contract required. > As a special customer service, and to improve the overall security of the Internet, Cisco may offer customers free software updates to address high-severity security problems. The decision to provide free software updates is made on a case-by-case basis. Refer to the Cisco security publication for details. Free software updates will typically be limited to Critical and High severity Cisco Security Advisories. > If Cisco has offered a free software update to address a specific issue, noncontract customers who are eligible for the update may obtain it by contacting the Cisco TAC using any of the means described in the General Security-Related Queries section of this document. https://tools.cisco.com/security/center/resources/security_vulnerability_policy.html https://tools.cisco.com/security/center/resources/security_v...
  - RedShift1 6y ago
    Can confirm this works, did this 3 times in the past. 2 times no questions asked, a 3rd time I first got a message that I didn't have a support contract, but got it after linking them the release notes of the firmware in question where it said Cisco would provide it for free.
- spicyramen 6y ago
  Cisco support at Enterprise level expensive or not. The Best in industry, their support organization is literally moving to GCP because they know what to do. GCP don't know yet.
gbil 6y ago
I can confirm that on personal devices with no support contract. You contacted them asking for an update image due to published vulnerabilities and they sent it over

sneak 6y ago

IIRC you needed a contract login to open TAC cases. I always just got copies of the .bins from friends who worked at places that had contracts. They didn't gate updates at that time by which model you bought, once you had access you could get firmware for anything Cisco.

oasisbob 6y ago
Phone or email would work too, no contract required. > As a special customer service, and to improve the overall security of the Internet, Cisco may offer customers free software updates to address high-severity security problems. The decision to provide free software updates is made on a case-by-case basis. Refer to the Cisco security publication for details. Free software updates will typically be limited to Critical and High severity Cisco Security Advisories. > If Cisco has offered a free software update to address a specific issue, noncontract customers who are eligible for the update may obtain it by contacting the Cisco TAC using any of the means described in the General Security-Related Queries section of this document. https://tools.cisco.com/security/center/resources/security_vulnerability_policy.html https://tools.cisco.com/security/center/resources/security_v...
- RedShift1 6y ago
  Can confirm this works, did this 3 times in the past. 2 times no questions asked, a 3rd time I first got a message that I didn't have a support contract, but got it after linking them the release notes of the firmware in question where it said Cisco would provide it for free.
spicyramen 6y ago
Cisco support at Enterprise level expensive or not. The Best in industry, their support organization is literally moving to GCP because they know what to do. GCP don't know yet.

gbil 6y ago

I can confirm that on personal devices with no support contract. You contacted them asking for an update image due to published vulnerabilities and they sent it over