topic Re: Cisco ASA5585-X module firmware upgrade in Network Security

Cisco ASA5585-X module firmware upgrade

satish.txt1 — Fri, 21 Feb 2020 17:51:30 GMT

I have cisco 5585-x with two SSP-20 blade in HA and one of blade getting stuck in rommod> when i am reloading it but other blades working fine after googlei9ng i found this bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtn87652/?rfs=iqvred

Based on that when i compare both blade i found they are running different version of firmware, now question is where do i get this module firmware and how do i upgrade them?

Buggy one.

asa-fw1/pri/act# show module 0 details

Card Type:          ASA 5585-X Security Services Processor-20 with 8GE
Model:              ASA5585-SSP-20
Hardware version:   1.3
Serial Number:      JAD1530BSSJ
Firmware version:   2.0(7)2
Software version:   9.6(4)36
MAC Address Range:  44d3.ca34.ec38 to 44d3.ca34.ec43
Data Plane Status:  Not Applicable
Console session:    Not ready
Status:             Up Sys

working one.

asa-fw1/sec/stby# show module 0 details

Card Type:          ASA 5585-X Security Services Processor-20 with 8GE
Model:              ASA5585-SSP-20
Hardware version:   2.0
Serial Number:      JAD17090KKH
Firmware version:   2.0(13)0
Software version:   9.6(4)36
MAC Address Range:  10f3.11ad.8ed4 to 10f3.11ad.8edf
Data Plane Status:  Not Applicable
Console session:    Not ready
Status:             Up Sys

Re: Cisco ASA5585-X module firmware upgrade

balaji.bandi — Thu, 23 Jan 2020 16:43:31 GMT

If you have CCO Login right, you can download from Softwre download the version you looking.

Re: Cisco ASA5585-X module firmware upgrade

satish.txt1 — Thu, 23 Jan 2020 17:05:27 GMT

I do have login CCO but i am not able to find specific version, can you send me link?

*I am looking for SSP-20 HW firmware not ASA software.

Re: Cisco ASA5585-X module firmware upgrade

balaji.bandi — Thu, 23 Jan 2020 17:33:51 GMT

To be honestly i have less installation for SSP- then we moved to FTD installation,

when ever i upgrade, i have never upgraded the firward of SSP (this is news to me)

If you upgrade SSP-20 with FirePOWER - it automatically upgrades firmware (i am guessing, never see seperate upgrade proceedure for the same)

check other one which was working what FirePOWER Version, then upgrade same in this kit so firmware should upgrade too.

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118824-configure-firepower-00.html

Re: Cisco ASA5585-X module firmware upgrade

satish.txt1 — Thu, 23 Jan 2020 17:46:38 GMT

That is why i am also confused how to handle it, we don't have any FirePOWER module so not sure i should follow that link.

How do i do upgrade without FirePOWER module installed?

Re: Cisco ASA5585-X module firmware upgrade

balaji.bandi — Fri, 24 Jan 2020 17:12:47 GMT

EDIT :

Appolgies - i have read the wrong. i was in impression you have mismatch version of SSP-SFR20 - But your case it was not.

Let me look again and give you right direction.

Re: Cisco ASA5585-X module firmware upgrade

satish.txt1 — Fri, 24 Jan 2020 16:24:13 GMT

Really, you are saying i should upgrade FirePOWER software in order to upgrade HW firmware?

Re: Cisco ASA5585-X module firmware upgrade

balaji.bandi — Fri, 24 Jan 2020 17:21:52 GMT

Can you post below output please :

show Module

show version