cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


7171
Views
20
Helpful
6
Replies
Beginner

Cisco ASA image versions.

Hi All.

Can anybody verify my perception on the differences between these images?

 

asa933-7-lfbff-k8.SPA

asa924-5-smp-K8.bin

asa924-5-k8.bin

 

I guess that lfbff is for the 5506-X and 5508-X With on-board FirePOWER services.

When are one supposed to user the SMP (Symmetric MultiProcessing) image? Would the ASA 5506-X and 5508-X be able to run SMP image?

Witch platforms use the image without any abbreviation?

Any clarification would be greatly appreciated.

Regards

2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Hi,

Hi,

Yes you are right.

asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.

asa924-5-smp-K8.bin---This is used for devices using Multi cores.

Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU.

asa924-5-k8.bin--- this is used for legacy ASA's using single cores.

Regards,

Aditya

Hall of Fame Master

As noted, the "SPA" versions

As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.

Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.

The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them

6 REPLIES 6
Cisco Employee

Hi,

Hi,

Yes you are right.

asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.

asa924-5-smp-K8.bin---This is used for devices using Multi cores.

Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU.

asa924-5-k8.bin--- this is used for legacy ASA's using single cores.

Regards,

Aditya

Beginner

Thank you !

Thank you !

That helped a lot. One small follow up: Why is the extension of the lfbff image also called SPA ? These images are only intended for the 5506-X and 5508-X's (the ones with onboard FirePOWER services), am I right?

Regards

Cisco Employee

Hi,

Hi,

The SPA indicates it is a digitally signed production image and this is the

version software extension.

Following the documentation related to the image SPA:

http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/configuration/guide/TI

Ps_Conversion/lmsi_15_1s_book/cf_dgtly_sgnd_sw.html#wp1054800

The installation procedure for this image files would still use the boot

system command and this software image is required on those platforms.

The following links contain further information regarding the platforms in

question:

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5506x-welcome.html

http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5508x-welcome.html

Regards,

Aditya

Enthusiast

H Adithya,

H Adithya,

How do I check if my firewall got Multi cores?

CF

Engager

hi,

hi,

you can use show version command.

the first gen ASA (without the 'X') has single core.

see sample below:

5525-X

Hardware:   ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
            ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB

5520:

Hardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

5505:

Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz,  
Internal ATA Compact Flash, 128MB   
BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Hall of Fame Master

As noted, the "SPA" versions

As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.

Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.

The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them