topic Re: Firepower version via cli in Network Security

Firepower version via cli

Danny Mainprize — Fri, 21 Feb 2020 16:18:39 GMT

Is there a way to collect the current running version of firepower without using FMC? SSH, snmp, python, etc...

I have dozens of different sites in multiple states that have firepower modules in their Cisco ASAs. I would like to create a dashboard that checks each one maybe once a month and displays their running version (6.2.3.5) and even better if it can include the vuln and fingerprint version as well (304).

I have tried applications like spiceworks, but nothing seems to really be able to get that information from outside of the management center

Re: Firepower version via cli

Seb Rupik — Tue, 02 Oct 2018 15:17:55 GMT

Hi there,

SSH onto the device and issue the command sh module ...the lines beginning 'sfr' will give you the info you're after. A python script with a bit of regex could scrape this info easily.

cheers,

Seb.

Re: Firepower version via cli

Danny Mainprize — Tue, 02 Oct 2018 20:03:11 GMT

That gets me the network sensor version, thank you for that. I was also hoping to get the other versions of software, but hopefully I can base everything from the sensor.