02-25-2016 04:41 AM - edited 03-12-2019 12:24 AM
Hi All.
Can anybody verify my perception on the differences between these images?
asa933-7-lfbff-k8.SPA
asa924-5-smp-K8.bin
asa924-5-k8.bin
I guess that lfbff is for the 5506-X and 5508-X With on-board FirePOWER services.
When are one supposed to user the SMP (Symmetric MultiProcessing) image? Would the ASA 5506-X and 5508-X be able to run SMP image?
Witch platforms use the image without any abbreviation?
Any clarification would be greatly appreciated.
Regards
Solved! Go to Solution.
02-25-2016 04:53 AM
Hi,
asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.
asa924-5-smp-K8.bin---This is used for devices using
Anything with "
asa924-5-k8.bin--- this is used for legacy ASA's using single cores.
Regards,
Aditya
02-25-2016 04:58 PM
As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.
Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.
The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them
02-25-2016 04:53 AM
Hi,
asa933-7-lfbff-k8.SPA---- This would be used on a Firepower enabled ASA i.e. 5506-X etc.
asa924-5-smp-K8.bin---This is used for devices using
Anything with "
asa924-5-k8.bin--- this is used for legacy ASA's using single cores.
Regards,
Aditya
02-25-2016 05:01 AM
Thank you !
That helped a lot. One small follow up: Why is the extension of the lfbff image also called SPA ? These images are only intended for the 5506-X and 5508-X's (the ones with onboard FirePOWER services), am I right?
Regards
02-25-2016 09:11 AM
Hi,
The SPA indicates it is a digitally signed production image and this is the
version software extension.
Following the documentation related to the image SPA:
http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/configuration/guide/TI
Ps_Conversion/lmsi_15_1s_book/cf_dgtly_sgnd_sw.html#wp1054800
The installation procedure for this image files would still use the boot
system command and this software image
The following links contain further information regarding the platforms in
question:
http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5506x-welcome.html
http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa-5508x-welcome.html
Regards,
Aditya
02-25-2016 12:03 PM
H Adithya,
How do I check if my firewall got Multi cores?
CF
02-25-2016 10:22 PM
hi,
you can use show version command.
the first gen ASA (without the 'X') has single core.
see sample below:
5525-X
Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
5520:
Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
5505:
Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz,
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB
02-25-2016 04:58 PM
As noted, the "SPA" versions are digitally signed and as of now limited to the ASA 5506, 08 and 16 model types. They have the cryptographic module in them to validate the digital signature which is intended as an anti-counterfeiting measure.
Those models, along with all of the other "X" models, have mutlicore CPUs. The 5512, 15, 25, 45, 55 and 85-X all use "SMP" images.
The legacy models (5505, 10, 20, 40, and 50) all have single core CPUs and use the software without either "SPA" or "SMP" designations. Of that group, only the 5505 has any software post-9.1(x) as the other models are all end of sales for some time now and only bug fix / security patch software releases are being released for them
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide