02-09-2024 01:05 AM
Hello everybody,
our customer has a Firepower 1010 running with ASA rel. 9.16(2)14
(appliance mode) and is registered in the Smart Licensing.
I want o upgrade it to the sugg. rel. 9.18(3) from the USB port.
I went to the fx-os level as usual, but I did not get the download command there:
firepower-1010# scope firmware
firepower-1010 /firmware # ?
scope Changes the current mode
show Show system information
Some days ago I did the same at a Firepower 2100 and there was a download command.
The documentation on CCO and in the WWW is petty poor in this matter.
How can I copy the firmware file to the Firepower 1010 or is there good documentation
about the upgrade of the Firepower 1010 in the ASA mode?
Thanks a lot!
Bye
R.
02-09-2024 02:41 AM
@swscco001 did you referred this guide? https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_27294
02-09-2024 06:05 AM
Hi Kasun,
there is no 9.X ASA image file in the ASA flash or ASDM.
On the fx-os level I see I get this:
firepower-1010# scope firmware
firepower-1010 /firmware #
scope Changes the current mode
show Show system information
firepower-1010 /firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp1k.9.16.2.14.SPA 9.16.2.14
cisco-asa-fp1k.9.18.1.SPA 9.18.1
cisco-ftd-fp1k.6.6.1-91.SPA 6.6.1-91
cisco-ftd-fp1k.7.0.1-84.SPA 7.0.1-84
firepower-1010 /firmware # show download
Download task:
File Name Protocol Server Port Userid State
--------- -------- --------------- ---------- --------------- -----
asdm-7171-155.bin
Usb A 0 Failed
cisco-asa-fp1k.9.18.1.SPA
Usb A 0 Downloaded
I will try it on Moday with the given upgrade guide using the ASDM variant.
I will give feedback then.
Thanks a lot!
Bye
R.
02-09-2024 04:29 AM
2100 is different compare to 1010 - 9.13 onwards 2100 upgrade can do what you mentioned.
For 1010 - i sitll follow the traditional way of upgrade. @Kasun Bandara mentioned the steps already.
always look for upgrade planer :
02-09-2024 05:06 AM
Hi balaji.bandi,
thanks for your reply!
If the tradititional way of upgrade the right way I should find a
firmware file in the flash and ASDM.
The ASDM does not show a firmware file (see attached) and the ASA flash
does not show a firmware file too:
FW01# sh fla
--#-- --length-- -----date/time------ path
537277387 4096 Feb 09 2024 13:40:01 log
805315979 23 Jul 11 2022 11:29:46 log/ssp_tz
805315980 70611 Apr 28 2023 14:06:29 log/ssp_tz/ssp_tz.log
537277398 23984 Jul 11 2022 11:22:08 log/asa-appagent.log.1.gz
537277399 3713 Jul 11 2022 14:36:05 log/lina_monitor.log
537277400 5358 Jul 11 2022 13:24:48 log/asa_snmp.log
17089763 27 Jul 11 2022 11:20:09 log/lina_sshd
17089764 455 Jul 11 2022 13:24:38 log/lina_sshd/scp_helper.log
537277401 35520 Jul 11 2022 12:31:04 log/asa-miovif.log.1.gz
537277402 25416 Jul 11 2022 13:50:00 log/asa-ssp_ntp.log.5.gz
537277403 25398 Jul 11 2022 14:35:01 log/asa-ssp_ntp.log.1.gz
537277404 25391 Jul 11 2022 14:00:00 log/asa-ssp_ntp.log.4.gz
537277405 25369 Jul 11 2022 14:10:00 log/asa-ssp_ntp.log.3.gz
537277442 25438 Jul 11 2022 14:25:01 log/asa-ssp_ntp.log.2.gz
537277444 2514719 Jul 11 2022 11:13:57 log/asa-ssp_ntp.log.1-2022071111.backup
537277445 811065 Jul 11 2022 10:04:25 log/asa-miovif.log.1-2022071112.backup
537277446 1758124 Feb 07 2024 16:47:53 log/asa-appagent.log
537277447 0 Apr 05 2022 11:06:45 log/asa-fxos_xml.log
537277458 0 Feb 09 2024 08:45:01 log/asa-ssp_ntp.log.sav.4
537277456 0 Jul 11 2022 13:24:33 log/stdout_offload_app.log
537277457 639 Jul 11 2022 14:36:20 log/lcore.log
537277450 0 Feb 09 2024 09:40:01 log/asa-ssp_ntp.log.sav.3
537277451 0 Feb 09 2024 10:40:01 log/asa-ssp_ntp.log.sav.2
537277452 0 Feb 09 2024 11:40:01 log/asa-ssp_ntp.log.sav.1
537277459 0 Feb 09 2024 12:40:01 log/asa-ssp_ntp.log.sav
537277345 3145898 Feb 09 2024 10:29:19 log/asa-ssp_ntp.log.5
537277443 3145773 Feb 09 2024 12:27:09 log/asa-ssp_ntp.log.3
537277449 819690 Feb 09 2024 13:41:24 log/asa-ssp_ntp.log.1
537277454 0 Feb 09 2024 13:40:01 log/asa-ssp_ntp.log
537277395 933717 Aug 30 2022 11:08:13 log/asa-miovif.log.5
537277347 802613 Aug 31 2022 15:21:18 log/asa-miovif.log.4
537277407 1184051 Feb 10 2023 12:43:21 log/asa-miovif.log.3
537277346 610452 Feb 10 2023 17:33:13 log/asa-miovif.log.2
537277455 704728 Feb 09 2024 09:27:21 log/asa-miovif.log.1
537277448 0 Nov 29 2023 07:30:01 log/asa-miovif.log
537277406 3145889 Feb 09 2024 11:28:14 log/asa-ssp_ntp.log.4
537277344 3145898 Feb 09 2024 13:26:03 log/asa-ssp_ntp.log.2
19199963 37230720 Feb 09 2022 03:02:46 asdm.bin
537277348 21 Apr 05 2022 11:06:45 smart-log
537277352 14521640 Feb 09 2024 13:05:32 smart-log/agentlog
17089740 38921800 Jul 11 2022 12:46:39 asdm-7151-150.bin
17089741 112373960 Jul 11 2022 12:55:03 asdm-openjre-7141-48.bin
17089742 35744052 Jul 11 2022 12:56:03 asdm-7141-48.bin
17089743 83043657 Jul 11 2022 13:07:46 anyconnect-win-4.10.05111-webdeploy-k9.pkg
17089744 34033084 Jul 11 2022 13:16:08 asdm-7131.bin
17089773 4096 Jan 28 2022 01:01:03 cores
11 16384 Jan 28 2022 00:59:32 cores/lost+found
1774193 4096 Jan 28 2022 01:01:03 cores/sysdebug
1774194 40 Apr 28 2023 14:03:09 cores/sysdebug/tftpd_logs
17089748 0 Apr 05 2022 11:05:53 coredumpfsysimage.bin
17089749 4096 Jan 28 2022 01:01:03 coredumpfsys
11 16384 Jan 28 2022 00:59:32 coredumpfsys/lost+found
1774193 4096 Jan 28 2022 01:01:03 coredumpfsys/sysdebug
1774194 40 Apr 28 2023 14:03:09 coredumpfsys/sysdebug/tftpd_logs
17089750 3552 Apr 28 2023 14:05:23 asa-cmd-server.log
17089751 39 Apr 28 2023 14:05:27 snortpacketinfo.conf
17089752 130709656 Jul 11 2022 10:59:27 asdm-openjre-7171-155.bin
17089753 51478176 Jul 11 2022 11:01:16 asdm-7171-155.bin
805315978 6 Jul 11 2022 11:20:25 packet-tracer
17089758 15916 Jul 11 2022 13:12:24 backup
17089759 37229568 Jul 11 2022 12:40:06 asdm-7161-150.bin
268643141 25 Apr 05 2022 11:07:15 coredumpinfo
268643142 59 Apr 05 2022 11:07:15 coredumpinfo/coredump.cfg
17089778 1937 Jul 11 2022 16:48:28 vpn.xml
17089768 15821 Aug 30 2022 10:42:43 backup_310822.old
17089765 14160 Oct 21 2022 09:04:47 backup211022.old
17089775 16282 Feb 10 2023 17:31:19 startup-5.cfg
17089734 6 Apr 05 2022 11:05:52 fxos
17089738 1462 Jul 11 2022 14:42:36 cspCfg.xml
17089746 117011512 Feb 07 2024 13:16:34 cisco-secure-client-win-5.1.2.42-webdeploy-k9.pkg
16106127360 bytes total (15071084544 bytes free)
Is there really no guide how to upgrade a Firepower 1010 with a new ASA
image?
What would you do in this situation?
Thanks a lot!
Bye
R.
02-09-2024 09:40 AM
Ok apologies i understood the issue you mentioned.
you already have 9.18 in the #show packages
isco-asa-fp1k.9.18.1.SPA 9.18.1
the guide have below information :
Install the package.
scope auto-install
install security-pack version version
In the show package output, copy the Package-Vers value for the security-pack version number. The chassis installs the ASA image and reboots.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide