topic Download failure - Internal error (1) in Network Security

Download failure - Internal error (1)

FrankH31494 — Thu, 07 Oct 2021 17:47:38 GMT

Hello,

I'm trying to migrate a Cisco Firepower FTD 1010 from FTD to ASA. I have downloaded the asa image (cisco-asa-fp1k.9.14.2.15.SPA ) when I try to upload it to the FTD, I will get a failed message when I check the show download-task details.

Model : Cisco Firepower 1010 Threat Defense (78) Version 6.4.0 (Build 102)

This error happens if I try tftp, scp, ftp, and sftp. I have even tried to download via the usb port. (system is unable to see the usb drive, it's not mounted. usb drive is formated fat32)

I have opened a case with TAC about this. I currently see there is a bug CSCvn9946, but it affects the firepower 9300 series, nothing about the 1010. but the error message is the same. any suggestions would be helpful. thanks

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn99461/?rfs=iqvred

File Name: cisco-asa-fp1k.9.14.2.15.SPA:69
Protocol: Tftp
Server: 192.168.1.5
Port: 0
Userid:
Path: /c/tftp-root/asa
Downloaded Image Size (KB): 0
Time stamp: 2021-10-05T19:16:51.173
State: Failed
Status: Download failure - Internal error (1)
Transfer Rate (KB/s): 0.000000
Current Task: deleting downloadable cisco-asa-fp1k.9.14.2.15.SPA:69 on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)

Re: Download failure - Internal error (1)

FrankH31494 — Fri, 08 Oct 2021 17:06:52 GMT

Ok, so I figured it out before TAC got back to me. I was able to perform the download via usb drive. Here's where the story gets interesting. I had to login to the FTD local management. from there, I did a dir, and I could see and view the usbdrive: From the previous firepower screen, I could not see the contents of the usb drive, and the download image command did not work. After I was able to see the contents of my flash drive, I went back and ran the download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA. it worked. see below.

firepower(local-mgmt)# dir
<CR>
bootflash: File URI
order Order files by time
usbdrive: File URI
volatile: File URI
workspace: File URI

firepower(local-mgmt)# dir usbdrive:/

2 4096 Oct 06 17:35:30 2021 System Volume Information/
1 386850624 Oct 02 14:35:20 2021 cisco-asa-fp1k.9.14.2.15.SPA

firepower /firmware # download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA
Please use the command 'show download-task' or 'show download-task detail' to check download progress.
firepower /firmware # show download-task

Download task:
File Name Protocol Server Port Userid State
--------- -------- --------------- ---------- --------------- -----
asa Tftp 192.168.1.5 0 Failed
cisco-asa-fp1k.9.14.2.15.SPA
Usb A 0 Downloading
cisco-asa-fp1k.9.14.2.15.SPA:69
Tftp 192.168.1.5 0 Failed
cisco-asa-fp1l.9.14.2.15.SPA
Tftp 192.168.1.6 0 Failed
firepower /firmware # show download-task detail

File Name: cisco-asa-fp1k.9.14.2.15.SPA
Protocol: Usb A
Server:
Port: 0
Userid:
Path:
Downloaded Image Size (KB): 377783
Time stamp: 2021-10-07T18:28:03.980
State: Downloading
Status: validating and unpacking the image
Transfer Rate (KB/s): 26984.500000
Current Task: unpacking image cisco-asa-fp1k.9.14.2.15.SPA on primary(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:UnpackLocal)

ciscoasa>

Re: Download failure - Internal error (1)

johnlloyd_13 — Tue, 13 Sep 2022 05:15:55 GMT

hi,

it seem i'm on the same predicament. is the USB file transfer the only solution given to you by TAC?

i tried both FTP and TFTP and failed half way through the file transfer.

it also seem this is a bug.

https://bst.cisco.com/bugsearch/bug/CSCvn99461

/firmware/download-task # show detail

Download task:

File Name: cisco-asa-fp2k.9.16.3.19.SPA

Protocol: Ftp

Server: 172.27.5.3

Port: 0

Userid: ftpuser

Path:

Downloaded Image Size (KB): 364183

Time stamp: 2022-09-13T04:09:34.401

State: Failed

Status: Download failure - Internal error (1)

Transfer Rate (KB/s): 183.745209

Current Task: deleting downloadable cisco-asa-fp2k.9.16.3.19.SPA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)

Re: Download failure - Internal error (1)

johnlloyd_13 — Thu, 15 Sep 2022 01:17:54 GMT

only USB transfer worked.

i managed to upgrade FPR 2100 ASA to 9.16

# scope firmware

/firmware # show download-task

Download task:

File Name Protocol Server Port Userid State

--------- -------- --------------- ---------- --------------- -----

bootflash:cisco-asa-fp2k.9.16.3.19.SPA

Tftp 10.1.4.8 0 Failed

cisco-asa-fp2k.9.16.3.19.SPA

Usb A 0 Downloaded

/firmware # show package

Name Package-Vers

--------------------------------------------- ------------

cisco-asa-fp2k.9.12.1.2.SPA 9.12.1.2

cisco-asa-fp2k.9.16.3.19.SPA 9.16.3.19

Re: Download failure - Internal error (1)

free_electron — Tue, 18 Oct 2022 19:43:43 GMT

my fpr-2110 is not able to detect the usb. not from the rommon mode neither from the FXOS mode.

usb is formatted with fat-32 file system.

any suggestions?

Re: Download failure - Internal error (1)

jovalo — Tue, 08 Nov 2022 07:52:16 GMT

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvv54829 is probably the issue. I still have some old usb 2.0 usb drives which are 8 or 4 gig and they work perfectly. None of the USB 3.0 usb drives which are 16 gig or larger do work in my case :(.

Re: Download failure - Internal error (1)

BrianSekleckiGE — Sat, 24 Dec 2022 07:55:54 GMT

Yea I confirmed it; Firepower only support USB 2.x media, even though:

1) The port is clearly a BLUE USB 3.x port

2) The hardware guide clearly says USB 3.x

https://www.cisco.com/c/en/us/td/docs/security/firepower/1010/hw/guide/hw-install-1010/overview.html
https://www.cisco.com/c/en/us/td/docs/security/firepower/1100/hw/guide/hw-install-1100/overview.html

~BAS