cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
16240
Views
30
Helpful
6
Replies

Cisco ASA image versions.

p.nordlien
Level 1
Level 1

Hi All.

Can anybody verify my perception on the differences between these images?

 

asa933-7-lfbff-k8.SPA

asa924-5-smp-K8.bin

asa924-5-k8.bin

 

I guess that lfbff is for the 5506-X and 5508-X With on-board FirePOWER services.

When are one supposed to user the SMP (Symmetric MultiProcessing) image? Would the ASA 5506-X and 5508-X be able to run SMP image?

Witch platforms use the image without any abbreviation?

Any clarification would be greatly appreciated.

Regards

2 Accepted Solutions

Accepted Solutions

Aditya Ganjoo
Cisco Employee
Cisco Employee

Hi,

Yes you are right.

asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.

asa924-5-smp-K8.bin---This is used for devices using Multi cores.

Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU.

asa924-5-k8.bin--- this is used for legacy ASA's using single cores.

Regards,

Aditya

View solution in original post

Marvin Rhoads
Hall of Fame
Hall of Fame

As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.

Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.

The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them

View solution in original post

6 Replies 6

Aditya Ganjoo
Cisco Employee
Cisco Employee

Hi,

Yes you are right.

asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.

asa924-5-smp-K8.bin---This is used for devices using Multi cores.

Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU.

asa924-5-k8.bin--- this is used for legacy ASA's using single cores.

Regards,

Aditya

Thank you !

That helped a lot. One small follow up: Why is the extension of the lfbff image also called SPA ? These images are only intended for the 5506-X and 5508-X's (the ones with onboard FirePOWER services), am I right?

Regards

Hi,

The SPA indicates it is a digitally signed production image and this is the

version software extension.

Following the documentation related to the image SPA:

http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/configuration/guide/TI

Ps_Conversion/lmsi_15_1s_book/cf_dgtly_sgnd_sw.html#wp1054800

The installation procedure for this image files would still use the boot

system command and this software image is required on those platforms.

The following links contain further information regarding the platforms in

question:

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5506x-welcome.html

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5508x-welcome.html

Regards,

Aditya

H Adithya,

How do I check if my firewall got Multi cores?

CF

hi,

you can use show version command.

the first gen ASA (without the 'X') has single core.

see sample below:

5525-X

Hardware:   ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
            ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB

5520:

Hardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

5505:

Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz,  
Internal ATA Compact Flash, 128MB   
BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Marvin Rhoads
Hall of Fame
Hall of Fame

As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.

Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.

The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: