Cisco signs all APIC images ( .iso for physical appliances, .ova for virtual). The SHA512 checksums are provided, ensuring you don’t inject corrupted or tampered code into your data center.
Would I recommend switching vendors just for download ease? No. But I strongly recommend automating your image management via Cisco’s APIs or a local repository. cisco apic software download
