topic As long as you can reach the in Network Security

PRSM update

bondandrey — Tue, 12 Mar 2019 05:22:43 GMT

Hello!

I have ASA5515 with WSE license (PRSM version 9.3.2.1 (9)).

On te Web UI Configuration > Updates I see following error:

Device is unable to receive updates from the Cisco update server. Please check your network and HTTP proxy server settings.

I find out that I can't allow Internet access on management interface.

How can I update PRSM modules?

Thanks!

PRSM requires Internet access

Marvin Rhoads — Thu, 22 Jan 2015 16:19:08 GMT

PRSM requires Internet access to update from Cisco. There's no option to download them separately and push them up to PRSM (single device mode) manually.

You could buy PRSM server (multi-device mode) which runs on a VM off-box. It would then access Internet and push the updates to the CX module on the ASA.

Thank you, Marvin!But I

bondandrey — Thu, 22 Jan 2015 18:05:53 GMT

Thank you, Marvin!

But I thought that there is another way to solve this issue for single device mode.

The only thing that came to my mind is to put SOHO router between management and internal network.

As long as you can reach the

Marvin Rhoads — Thu, 22 Jan 2015 18:11:39 GMT

As long as you can reach the Internet from the physical ASA management interface that PRSM uses for its own unique address, updates will work.

Whether that's via your "normal" outbound path or via some other purposeful device you put in the path, PRSM doesn't care. As long as it can get to the Cisco update server via https it is happy.