topic Re: Firepower SFR module upgrade for different ASA models. in Network Security

Firepower SFR module upgrade for different ASA models.

KRSC — Fri, 01 Mar 2019 12:25:12 GMT

I have to upgrade firepower sfr modules for different ASA models ( 5506 - 5585 models ) from version 5.3.0 to 6.3.0 by
followig intermediate upgrade paths.My question is, can I use the same upgrade image, boot, priliminary files for all
the models ? or do I have to download software specific to ASA models ?
Someone who has practically tested can clarify my doubts pls..? Thanks in Advance.

Re: Firepower SFR module upgrade for different ASA models.

Rahul Govindan — Fri, 01 Mar 2019 14:02:03 GMT

Except for the ASA5585, everything else should be the same as the SFR runs as a software service on top of the ASA. The ASA5585 has the hardware SFR module, so the boot and image files are slightly different. I would verify the sha512 hash of the files on the Cisco Download page to verify this as well.

Re: Firepower SFR module upgrade for different ASA models.

Marvin Rhoads — Fri, 01 Mar 2019 15:53:56 GMT

Note that the ASA 5506-X and 5512-X do not support Firepower service module 6.3.x or later.

6.2.3.x is the highest version you can install on those platforms due to memory limitations.

Re: Firepower SFR module upgrade for different ASA models.

KRSC — Mon, 04 Mar 2019 08:13:47 GMT

Thanks Rahul.
So Except 5585 model, we can use the same set of software to all other models.
Will check and let me comeback if any issues found.

Onceagain Thanks

Re: Firepower SFR module upgrade for different ASA models.

KRSC — Mon, 04 Mar 2019 08:15:44 GMT

Hi Marvin - Thanks for the suggestion. Will consider this point.