topic cisco should really ship new in Network Security

ASA 5506-X SourceFire Update

Rodrigo Gurriti — Tue, 12 Mar 2019 12:41:55 GMT

Hi,

Has anyone updated SF on a 5506-X? I just got two out of the box and tried to update and I get this error:

Task Status Your task Installing Cisco Network Sensor Patch version: 5.4.1.1-23 (Local Install) failed at Wed Jun 10 21:11:20 2015
Update Installation Failed : [55%] Fatal error: Error running script 800_post/001_reinstall_sru.sh

The IOS running on the ASA was 9.3.3 and 9.4.1 and both times it failed. The update starts and then the SF goes Unresponsive and I have to do a manual reload and then I see the error.

Right now the 3D Device running software version: 5.4.1 and this update was a patch Cisco_Network_Sensor_Patch-5.4.1.1-23.sh

The image here shows the device stuck in "running"

Thank you,

Rod

OK found the problem.In a

Rodrigo Gurriti — Mon, 15 Jun 2015 03:09:50 GMT

OK found the problem.

In a nutshell the update takes too long and the module goes to a Unresponsive state and stay that way for 30min then it comes back.

I thought the updated had failed, because the module was unresponsive for more then 20min, then I reloaded the module. After it booted up I got the error msg on the asdm.

Turns out that the 5506 takes around 30 min to upgrade. The module goes for about 30min unresponsive then it comes back! Never thought a 30mb upgrade would take this long that is the why i reloaded the module.

Cya

How did you apply the patch?

gamoore — Tue, 07 Jul 2015 04:02:45 GMT

How did you apply the patch?

The process for applying

Marvin Rhoads — Tue, 07 Jul 2015 15:45:34 GMT

The process for applying patches using ASDM is detailed in the User Guide.

Please see this direct link.

I feel stupid because now it

joshvinyard913 — Tue, 28 Jul 2015 20:49:45 GMT

I feel stupid because now it says 5.4.1.1 is running, when this morning it says 5.4.1 was running.

Did I actually upgrade? I had all the failures that Rodrigo had with many of the same reasons. I let it go and finally I see this is different.

Why is it marked as 5.4.1.2-23 sensor patch but indicate 5.4.1.1 installed and running if it did in fact complete installation? Shouldn't these version numbers match, or am I being a little quixotic?

I am using an ASA 5506-X

Thank you for any kind souls which can shed light on this. I am a total noob!

so mine has been non

sciarrino — Thu, 18 May 2017 23:10:32 GMT

so mine has been non responsive for an hour can I check on the task in the CLI via ssh?

Thanks

Yes. GO into the FirePOWER

Marvin Rhoads — Fri, 19 May 2017 03:35:34 GMT

Yes. GO into the FirePOWER service module cli and switch to expert mode.

Then "cd /var/log/sf".

Look for the folder with the name of youpatch and cd into it.

Then "tail status.log".

If you wwant to watch for updates in real time, then "tail -f status.log".

cisco should really ship new

sciarrino — Fri, 19 May 2017 23:36:29 GMT

cisco should really ship new device with 6.x...

I think I'm on my 5th upgrade.. and still have more to do.

I guess I should have just did a reload rather than 8 upgrades...

Thanks..