topic As noted, the "SPA" versions in Network Security

Cisco ASA image versions.

p.nordlien — Tue, 12 Mar 2019 07:24:08 GMT

Hi All.

Can anybody verify my perception on the differences between these images?

asa933-7-lfbff-k8.SPA

asa924-5-smp-K8.bin

asa924-5-k8.bin

I guess that lfbff is for the 5506-X and 5508-X With on-board FirePOWER services.

When are one supposed to user the SMP (Symmetric MultiProcessing) image? Would the ASA 5506-X and 5508-X be able to run SMP image?

Witch platforms use the image without any abbreviation?

Any clarification would be greatly appreciated.

Regards

Hi,

Aditya Ganjoo — Thu, 25 Feb 2016 12:53:00 GMT

Hi,

Yes you are right.

asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.

asa924-5-smp-K8.bin---This is used for devices using Multi cores.

Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU.

asa924-5-k8.bin--- this is used for legacy ASA's using single cores.

Regards,

Aditya

Thank you !

p.nordlien — Thu, 25 Feb 2016 13:01:36 GMT

Thank you !

That helped a lot. One small follow up: Why is the extension of the lfbff image also called SPA ? These images are only intended for the 5506-X and 5508-X's (the ones with onboard FirePOWER services), am I right?

Regards

Hi,

Aditya Ganjoo — Thu, 25 Feb 2016 17:11:45 GMT

Hi,

The SPA indicates it is a digitally signed production image and this is the

version software extension.

Following the documentation related to the image SPA:

http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/configuration/guide/TI

Ps_Conversion/lmsi_15_1s_book/cf_dgtly_sgnd_sw.html#wp1054800

The installation procedure for this image files would still use the boot

system command and this software image is required on those platforms.

The following links contain further information regarding the platforms in

question:

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5506x-welcome.html

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5508x-welcome.html

Regards,

Aditya

H Adithya,

Cisco Freak — Thu, 25 Feb 2016 20:03:17 GMT

H Adithya,

How do I check if my firewall got Multi cores?

As noted, the "SPA" versions

Marvin Rhoads — Fri, 26 Feb 2016 00:58:42 GMT

As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.

Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.

The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them

hi,

johnlloyd_13 — Fri, 26 Feb 2016 06:22:17 GMT

hi,

you can use show version command.

the first gen ASA (without the 'X') has single core.

see sample below:

5525-X

Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB

5520:

Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

5505:

Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz,
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB