topic Re: Firepower1120 reimage to ASA in Network Security

Firepower1120 reimage to ASA

KMNRuser — Thu, 13 Mar 2025 16:11:30 GMT

We have purchased several Firepower 1120 appliances. they come with FTD code on them. We are trying to reimage them to run ASA code (management decision).

The model is supposed to be able to support ASA code. I have downloaded code cisco-asa-fp1k.9.22.1.1.SPA.

From Rommon mode i have been able to use the tftpdnld -b command after setting the variables to the TFTP server to successfully move the image from the TFTP box to the Firepower chassis.

It will load the screen indicating Success, and then sits at IMAGE VERIFIED..

then takes off and ends up at a line indicating MB total ACT2 read retries detected -1, and at this point the fans all start cycling on and off in 1 second intervals and it fails to proceed.

I have the complete process attached in the file below.

Can anyone indicate what next steps would be to get it to boot the ASA code that is shipping successfully to the box?

Thank you!

KMNRUser

Re: Firepower1120 reimage to ASA

Rob Ingram — Thu, 13 Mar 2025 16:17:36 GMT

@KMNRuser cisco guides -

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

Re: Firepower1120 reimage to ASA

KMNRuser — Thu, 13 Mar 2025 17:51:53 GMT

Rob,

Thank you for your response.

I had already referenced the guides as you have provided. When I issue the "show package" command from scope "firmware" it does not list any packages or files..

thx

Re: Firepower1120 reimage to ASA

Rob Ingram — Thu, 13 Mar 2025 19:12:29 GMT

@KMNRuser does the previous step download the package from the remote server actually complete? - Validate the download progress with the command show download-task:

Re: Firepower1120 reimage to ASA

KMNRuser — Fri, 14 Mar 2025 15:35:25 GMT

Rob,

Interestingly enough, it does NOT complete.. I can tell this by looking at the TFTP server.. there is a message indicating that the file starts transferring, but then there is another message indicating "Interrupted by client, received error packet with code 3 and message:Out of Memory..

I am not sure why this would be since this is an RMA replacement Firepower1120..

Re: Firepower1120 reimage to ASA

KMNRuser — Fri, 21 Mar 2025 13:11:33 GMT

We ended up performing a "factory-reset" from rommon mode. then we were able to boot from a usbA: location where we had the file "cisco-asa-fp1k.9.23.1.SPA" stored. Another interesting point was that in the putty CLI i had established thru a serial connection to the console port on the Firepower, there were several times when we had to go in and press ENTER when it seemed as if the process was stalled, but it actually was not. It would seem stalled as the CLI would stop at a point, but when enter was pressed it would show more output. Once we learned that trick, it helped us move thru the re-image successfully.