Copy running-config from ASA via SCP stopped working

[jakub-maliska]

Hi,

we used to download running-config from ASA firewall on remote server using command:

scp user@ASA_IP_ADDRESS:system://running-config running-config

and I'm certain it worked with some older version of ASA. Now the firewalls are updated to  9.20(2)21 and it looks like it stopped working, I'm getting error:

scp: no such file or directory

Did something change or am I doing something wrong? Can you help me?

Thanks

[MHM Cisco World]

Try use http to download run config 

I think there is bug in some asa ver. Make scp not work.

It more easy if you have asdm 

MHM

[jakub-maliska]

Thanks for the suggestion but ASDM is not enabled due to the security reasons.

[Georg Pauwen]

Hello,

check if the bug below applies. The workaround is to disable to SSH stack:

ciscoasa(config)# no ssh stack ciscossh

https://bst.cisco.com/bugsearch/bug/CSCwh93649

[jakub-maliska]

Hello,

Actually scp copy from the firewall works. This is a Firepower 2110 firewall and the notes at the end of the bug article says that Firepower 2100 is not affected.

But due to the security reason it was requested to initiate the configuration backup from remote backup server, not from the firewall. Therefore scp from router is currently considered only as a workaround.

Anyway, thank you for the suggestion.