topic Cisco ASA Firepower Module Stuck in Recovery Mode in Network Security

Cisco ASA Firepower Module Stuck in Recovery Mode

dj0321 — Mon, 17 Aug 2020 13:03:33 GMT

Hello Folks,

I am having an issue where the SFR module inside of my Cisco ASA 5506-X is stuck in Recovery mode. I have tried all the steps on trying to bring it back to an "Up" status. However, its status will not change. Has anyone seen this type of behavior before? Can anyone provide some decent steps to try and help me diagnose this issue?

STORM-ASA# show module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5506-X with FirePOWER services, 8GE, AC, ASA5506 JAD19320155
sfr Unknown N/A JAD19320155

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 5c83.8fce.02a0 to 5c83.8fce.02a9 1.0 1.1.15 9.8(4)20
sfr 5c83.8fce.029f to 5c83.8fce.029f N/A N/A

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Recover Not Applicable

STORM-ASA(config)# show inventory
Name: "Chassis", DESCR: "ASA 5506-X with FirePOWER services, 8GE, AC, DES"
PID: ASA5506 , VID: V01 , SN: JMX1932XXXX

Name: "Storage Device 1", DESCR: "ASA 5506-X SSD"
PID: ASA5506-SSD , VID: N/A , SN: MSA1922082C

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

balaji.bandi — Mon, 17 Aug 2020 13:25:58 GMT

Is there any upgrade ? or is this worked before ?

try reseat the SFR Module

https://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5500xguide/5500xhw/asa_overview.html#39421

still has issue may required re-image.

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

dj0321 — Mon, 17 Aug 2020 14:01:21 GMT

I did follow the re-image process and same thing. What does the SFR module look like on the Cisco ASA 5506? The only thing I really see if the SSD card on the bottom of the ASA. Is there another module for the SFR physically on the ASA?

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

balaji.bandi — Mon, 17 Aug 2020 15:16:12 GMT

YEs that is SSD card is SFR, make sure your ASA stay 9.9 or below version, anything above your SFR not going to work.

you can follow example guide to re-image :

https://www.petenetlive.com/KB/Article/0001164

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

dj0321 — Mon, 17 Aug 2020 16:29:54 GMT

Yeah. I followed those exact instructions on re-imaging and it remains stuck on recover.

ASA Version: 9.8(4).20

ASDM Version 7.13(1)

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

Marvin Rhoads — Tue, 18 Aug 2020 04:47:40 GMT

During the reimage process the module will be in recovery mode between doing the initial bootstrap and the final configuration of the full image on the module.

You need to session into the module from the ASA and complete the process for it to complete.

Re: Cisco ASA Firepower Module Stuck in Recovery Mode

balaji.bandi — Tue, 18 Aug 2020 09:35:47 GMT

what happens when you issue below commad :

#debug module-boot

#session sfr console