topic Re: ASA5506 sensor patch to 6.2.3.3-76 install failed in Network Security

ASA5506 sensor patch to 6.2.3.3-76 install failed

pantelis1 — Tue, 12 Mar 2019 13:51:44 GMT

I am running the following sfr but when trying to update to 6.2.3.3-76 from the GUI it fails

Model	ASA5506
Serial Number	*****
Software Version	6.2.3 (build 83)
OS	Cisco Fire Linux OS 6.2.3 (build13)
Snort Version	2.9.12 GRE (Build 327)
Rule Update Version	2018-07-30-001-vrt
Rulepack Version	2118
Module Pack Version	2401
Geolocation Update Version	2018-07-16-002
VDB Version	build 300 ( 2018-07-03 15:49:24 )

Based on the status log, the update is stuck on 58% (info below)

firepower:/var/log/sf/Cisco_Network_Sensor_Patch-6.2.3.3# tail -f status.log
ui:[52%] Running script 600_schema/000_bef_install_csm.sh...
ui:[53%] Running script 600_schema/000_install_csm.sh...
ui:[53%] Running script 600_schema/001_Start_Sybase.sh...
ui:[54%] Running script 600_schema/100_update_database.sh...
ui:[55%] Running script 600_schema/110_post_update_dbic.sh...
ui:[55%] Running script 800_post/002_unpack_gwt_files.sh...
ui:[56%] Running script 800_post/005_extra_peer_info.pl...
ui:[57%] Running script 800_post/010_update_vmware_tools.sh...
ui:[57%] Running script 800_post/011_reconfigure_model_pack.sh...
ui:[58%] Running script 800_post/021_reinstall_sru.sh...

The sensor is up and traffic is being inspected with no issue. Can anyone suggest a way to remove the stale update (it is running for almost 24h so I assume it won't complete ) and re apply the update?

Thanks

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

Raghunath Kulkarni — Thu, 02 Aug 2018 03:39:54 GMT

The first recommendation is to check the status of the upgrade. Once we ensure that the upgrade process has died or timed out then we can make changes associated with the stale entry.

The stage where it is stuck is relating to installing the SRU updates. Check if there are any pending SRU updates that are happening on the device at the same time.

In case if you are uncomfortable with this, I would recommend having TAC involved.

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

pantelis1 — Thu, 02 Aug 2018 06:28:30 GMT

So I reboot the ASA and left it over night and this morning was updated to the latest version (6.2.3.3-76)

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

Mohammad Rahman — Wed, 17 Oct 2018 21:29:32 GMT

Hi Pantelis,
Can you share with whole process from beginning to end to patch ASA 5506X with 6.2.3.3-76? I am new to do this. I browsed lot of links but I did not find any reliable link to complete the project. I have ASA 5506X.

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

pantelis1 — Thu, 18 Oct 2018 06:26:51 GMT

Please follow this guide

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/623x/relnotes/Firepower_Release_Notes_623x/upgrade_procedures.html

Please note that upgrade of sensor on ASA5506 can actuallly take a long time. Install it and wait for it to complete (about 49 minutes in my case)

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

Mohammad Rahman — Thu, 18 Oct 2018 13:41:54 GMT

Thank you very much.

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

bilaal.amin — Wed, 11 Sep 2019 09:22:31 GMT

Hi all,

I am having the same issue. I have the Installing Cisco Network Sensor Patch version: 6.2.2.5-57 process running for almost a week. First it stopped at 44% and I did restart the Firewall. Then is strated the isntallation process again yesterday and from there it is stuck on 37%.

This process is affecting the deployment of Access Policies.

Any suggestion to cancel this process or have it completed?

Re: ASA5506 sensor patch to 6.2.3.3-76 install failed

bilaal.amin — Mon, 16 Sep 2019 08:33:56 GMT

Not sure what happened but the installation came to an end and it failed.

I downloaded the update from cisco and sucessfuly intalled it on the Firepower.