ASA5525-X firepower installation

[Christian Juel-Jensen]

Hi, i'm deploying a new firepower instance on a 5525-X. I have removed the cx module, rebooted the firewall and installed the boot img successfully. 

The ASA is running 9.4 (recommended)

However when i run the install i get the following error

system install ftp://XXXXX/asasfr-sys-5.4.0-764.pkg

Verifying

Downloading

Package download failed. Please try again. If the problem persists, check if server is unreliable,or move the file to a different server or try different protocol.

Upgrade aborted.

I have tried both version 5.4 and 6.0 and redownloaded, different ftp servers and via dropbox / http. The same error everytime. 

Anyone else seen this before?

Thanks in advance!

[Jetsy Mathew]

Hello Christian ,

Hope you are following the asa sfr installation guide .

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

The error what you receives is just because of the connectivity issues with the ftp server that you  are trying to use. How you copied the .img boot image ? Is that was successful ?

Just make sure that the device has the proper connectivity with the ftp, http or https server that you are using. If there is proper connectivity it will prompt for the user credentails and start downloading the file from the location that you copied it..Thus the issue is not because of software versions that you use  , its only because of the connectivity issues with the server taht you use for downloading the image remotely.

Rate if this answer helps you.

Regards

jetsy 

[Christian Juel-Jensen]

Hi, and thanks for your reply. 

Yes the connectivity is correct. I have used the same ftp server for a lot of installations. 

I forgot to mention that the error message comes a long time after the download has started. Since there are no progress bar available (not on the ftp server either) i assume it is when the download is about to finish. 

As mentioned i have tried with a public link in dropbox also which has worked fine earlier. 

Best regards

Christian

[Jetsy Mathew]

Hello Christian,

If the connectivity is fine or if its able to fetch the file from location then it will start the next step as extracting without any delay with the package detail name as follows:-

Package Detail
        Description: Cisco ASA-FirePOWER x.x.x-152 System Install

If you havent received till that, it means the file is not even to able to fetch from location.

Regards

jetsy 

[Christian Juel-Jensen]

Thanks for everyones contribution.

the fact is that the ftp server used have been used several times for this exact purpose and i could see in the logs that the data was transferring so connectivity was good, no drops in pings or anything. The Firepower boot img just dropped the connection after a while both from the ftp server and from a public dropbox url with both 5.4 and 6.0.

The ASA is a 5525 that has been in production for a long time so i would think that any issues with connectivity would be apparent by now.

In desperation i installed an ftp server on the inside of the network and from there it worked correctly.

I was not able to find the issue but at least i have been able to continue / finish the installation.

Again, thanks for your efforts!

Best regards

Christian

[jpederson1]

Christian,

Any chance you run a repeated ping at the destination to see if there are any drops with that?

[Marvin Rhoads]

If you are building a FirePOWER module from scratch after having uninstalled the cxsc, you need to first copy the asasfr-boot-xxx file onto the ASA and then use it to install and bootstrap the sfr module.

Only after you have done that do you copy the -sys file onto the module (from the module itself).