topic Re: Upgrading ASA 5506-x in Network Security

Upgrading ASA 5506-x

TAC-itsupport — Fri, 08 Dec 2023 15:52:06 GMT

Hello,

I'm trying to upgrade our ASA 5506-x from 9.12(1) version to 9.19 version and downloaded the 9.12 version but after upgrade the ASA and asdm my asa still showing the old version 9.12 but asdm was upgrade.

Here is the show version command:

System image file is "disk0:/asa0-12-1-2-lfbff-k8.SPA"

First I tried to use this asa version for upgrading "asa9-19-1-smp-k8.bin" but after reload the system still was old version and then tried to use this version to upgrade it "asa9-19-1-lfbff-k8.SPA" but the result was same and after reload and reboot the ASA still showing the old version.

Could you please let me know what is the issue and why still showing the old version?

Thanks

Babak

Re: Upgrading ASA 5506-x

Rob Ingram — Fri, 08 Dec 2023 15:55:39 GMT

@TAC-itsupport the ASA 5506-X does not support 9.19. 9.16 is the latest supported version -https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html

Re: Upgrading ASA 5506-x

TAC-itsupport — Fri, 08 Dec 2023 16:00:52 GMT

Thank you Rob. one more question, should I use " .bin" version or ".SPA" for upgrade.

My current image version is 9-12-1-2-lfbff-k8.SPA so as I know the . SPA use for multi core ! is it correct?

Thanks

Re: Upgrading ASA 5506-x

Rob Ingram — Fri, 08 Dec 2023 16:04:38 GMT

@TAC-itsupport you have to use the SPA file, as you only have the option to download the SPA upgrade file https://software.cisco.com/download/home/286283326/type/280775065/release/9.12.2

Re: Upgrading ASA 5506-x

Marvin Rhoads — Fri, 08 Dec 2023 16:13:10 GMT

FYI all 5500-X hardware is multicore. The "smp" denotes that - symmetric multiprocessor.

SPA denotes that the image is digitally signed with Cisco Production Key "A". That feature is to validate software authenticity and protect against supply chain compromises.

https://community.cisco.com/t5/network-security/cisco-asa-image-versions/td-p/2908797

Re: Upgrading ASA 5506-x

TAC-itsupport — Fri, 08 Dec 2023 16:15:11 GMT

Thank you Marvin

Re: Upgrading ASA 5506-x

TAC-itsupport — Fri, 08 Dec 2023 16:45:14 GMT

Sorry Rob, you mentioned I just have one option to download but that version on the link is 9.12 and my current version is 9.12

So if the final version for 5506-x is 9.16(x) can I use 9.16 on this link "https://software.cisco.com/download/home/279513399/type/280775065/release/9.16.4 "

Re: Upgrading ASA 5506-x

Rob Ingram — Fri, 08 Dec 2023 16:49:34 GMT

@TAC-itsupport yes I mentioned 9.16 is the latest supported version for the 5506-X in the first reply. I said that a .SPA file is the only option to download not a .bin file and provided an example, which just happened to be 9.12. https://software.cisco.com/download/home/286283326/type/280775065/release/9.16.4