Cisco ASA Firepower Module Stuck in Recovery Mode

[dj0321]

Hello Folks,

I am having an issue where the SFR module inside of my Cisco ASA 5506-X is stuck in Recovery mode. I have tried all the steps on trying to bring it back to an "Up" status. However, its status will not change. Has anyone seen this type of behavior before? Can anyone provide some decent steps to try and help me diagnose this issue?

STORM-ASA# show module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5506-X with FirePOWER services, 8GE, AC, ASA5506 JAD19320155
sfr Unknown N/A JAD19320155

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 5c83.8fce.02a0 to 5c83.8fce.02a9 1.0 1.1.15 9.8(4)20
sfr 5c83.8fce.029f to 5c83.8fce.029f N/A N/A

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Recover Not Applicable

STORM-ASA(config)# show inventory
Name: "Chassis", DESCR: "ASA 5506-X with FirePOWER services, 8GE, AC, DES"
PID: ASA5506 , VID: V01 , SN: JMX1932XXXX

Name: "Storage Device 1", DESCR: "ASA 5506-X SSD"
PID: ASA5506-SSD , VID: N/A , SN: MSA1922082C

[balaji.bandi]

Is there any upgrade ? or is this worked before ?

try reseat the SFR Module

https://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5500xguide/5500xhw/asa_overview.html#39421

still has issue may required re-image.

[dj0321]

I did follow the re-image process and same thing. What does the SFR module look like on the Cisco ASA 5506? The only thing I really see if the SSD card on the bottom of the ASA. Is there another module for the SFR physically on the ASA?

[balaji.bandi]

YEs that is SSD card is SFR, make sure your ASA stay 9.9 or below version, anything above your SFR not going to work.

you can follow example guide to re-image :

https://www.petenetlive.com/KB/Article/0001164

[dj0321]

Yeah. I followed those exact instructions on re-imaging and it remains stuck on recover. 

ASA Version: 9.8(4).20

ASDM Version 7.13(1)

[Marvin Rhoads]

During the reimage process the module will be in recovery mode between doing the initial bootstrap and the final configuration of the full image on the module.

You need to session into the module from the ASA and complete the process for it to complete.

[balaji.bandi]

what happens when you issue below commad :

#debug module-boot

#session sfr console