Datasheet

Export Compliance Guide and Q&A

Q. How do I purchase a restricted Cisco ASA 5500 Series product?

A. To purchase any restricted product, follow the restricted product export eligibility guidelines.

This includes no end use by:

●

Government (see exempt government entities)

●

Sanctioned entities, restricted end users, or enterprises under their control/ownership

●

Telcos/ISPs may not provide cryptographic services to governments (see exempt

government entities)

Also required is written assurance that acknowledges the end user’s compliance with

published restrictions for all restricted product orders. Licenses are required for restricted

products going to restricted countries, uses, and users. Visit the Cisco Encryption Sales Tool

Quick Reference Guide for additional details on these guidelines or contact Cisco Export

Compliance & Regulatory Affairs with questions.

Q. What is a written assurance?

A. Written assurances must be completed by the end user of restricted commodities. Valid e-

mail and contact information is required. This form records a customer’s acknowledgement of

their responsibility and ability to comply with international laws pertaining to sanctioned uses,

users, and territories. Cisco Regulatory Affairs retains the authority to require written

assurances. The data submitted is reviewed for integrity, may be presented to the U.S.

government, and is archived for 10 years.

Q. What is Enhanced Proliferation Control Initiative (EPCI) assurance?

A. Enhanced Proliferation Control Initiative requires that exporters do not participate in the

proliferation of weapons or weapons systems, or in the design or development of weapons of

mass destruction. Export may not proceed. When the exporter knows that the export will be

used in the design, development, production, or stockpiling of missiles or chemical or

biological weapons; or when the exporter is informed by the U.S. Department of Commerce

that there is a serious risk of diversion, an EPCI written assurance is required to ensure

compliance with this regulation. An export license may also be required.

Q. What do K8 and K9 designators refer to in Cisco product part numbers?

A. In general, the K8 and K9 designators in Cisco product part numbers refer to unrestricted and

restricted encryption respectively (Table 2). These designators have been defined by Cisco to

be used in product part numbers of products that support encryption.

Table 2. Cisco Encryption Designators for U.S. Export Regulation Encryption Classification

Cisco Encryption

Designator

Mass Market Unrestricted Restricted

K8 By general definition By general definition Not applicable

K9 Products that use encryption

solely for securing network

management data

Products that use encryption

solely for securing network

management data

By general definition