Firepower 1010: Unable to upgrade the ASA image

[swscco001]

Hello everybody,

our customer has a Firepower 1010 running with ASA rel. 9.16(2)14
(appliance mode) and is registered in the Smart Licensing.

I want o upgrade it to the sugg. rel. 9.18(3) from the USB port.

I went to the fx-os level as usual, but I did not get the download command there:

firepower-1010# scope firmware
firepower-1010 /firmware # ?
  scope  Changes the current mode
  show   Show system information

Some days ago I did the same at a Firepower 2100 and there was a download command.

The documentation on CCO and in the WWW is petty poor in this matter.

How can I copy the firmware file to the Firepower 1010 or is there good documentation 
about the upgrade of the Firepower 1010 in the ASA mode?

Thanks a lot!



Bye
R.

[Kasun Bandara]

@swscco001 did you referred this guide? https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_27294

[swscco001]

Hi Kasun,

there is no 9.X ASA image file in the ASA flash or ASDM.

On the fx-os level I see I get this:

firepower-1010# scope firmware
firepower-1010 /firmware #
  scope  Changes the current mode
  show   Show system information


firepower-1010 /firmware # show package
Name                                          Package-Vers
--------------------------------------------- ------------
cisco-asa-fp1k.9.16.2.14.SPA                  9.16.2.14
cisco-asa-fp1k.9.18.1.SPA                     9.18.1
cisco-ftd-fp1k.6.6.1-91.SPA                   6.6.1-91
cisco-ftd-fp1k.7.0.1-84.SPA                   7.0.1-84

firepower-1010 /firmware # show download

Download task:
    File Name Protocol Server          Port       Userid          State
    --------- -------- --------------- ---------- --------------- -----
    asdm-7171-155.bin
              Usb A                             0                 Failed
    cisco-asa-fp1k.9.18.1.SPA
              Usb A                             0                 Downloaded

I will try it on Moday with the given upgrade guide using the ASDM variant.

I will give feedback then.

Thanks a lot!



Bye
R.

[balaji.bandi]

2100 is different compare to 1010 - 9.13 onwards 2100 upgrade can do what you mentioned.

For 1010 - i sitll follow the traditional way of upgrade. @Kasun Bandara mentioned the steps already.

always look for upgrade planer :

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html#ID-2152-0000000a

[swscco001]

Hi balaji.bandi,

thanks for your reply!

If the tradititional way of upgrade the right way I should find a 
firmware file in the flash and ASDM.

The ASDM does not show a firmware file (see attached) and the ASA flash
does not show a firmware file too:

FW01# sh fla
--#--  --length--  -----date/time------  path
537277387  4096        Feb 09 2024 13:40:01  log
805315979  23          Jul 11 2022 11:29:46  log/ssp_tz
805315980  70611       Apr 28 2023 14:06:29  log/ssp_tz/ssp_tz.log
537277398  23984       Jul 11 2022 11:22:08  log/asa-appagent.log.1.gz
537277399  3713        Jul 11 2022 14:36:05  log/lina_monitor.log
537277400  5358        Jul 11 2022 13:24:48  log/asa_snmp.log
17089763  27          Jul 11 2022 11:20:09  log/lina_sshd
17089764  455         Jul 11 2022 13:24:38  log/lina_sshd/scp_helper.log
537277401  35520       Jul 11 2022 12:31:04  log/asa-miovif.log.1.gz
537277402  25416       Jul 11 2022 13:50:00  log/asa-ssp_ntp.log.5.gz
537277403  25398       Jul 11 2022 14:35:01  log/asa-ssp_ntp.log.1.gz
537277404  25391       Jul 11 2022 14:00:00  log/asa-ssp_ntp.log.4.gz
537277405  25369       Jul 11 2022 14:10:00  log/asa-ssp_ntp.log.3.gz
537277442  25438       Jul 11 2022 14:25:01  log/asa-ssp_ntp.log.2.gz
537277444  2514719     Jul 11 2022 11:13:57  log/asa-ssp_ntp.log.1-2022071111.backup
537277445  811065      Jul 11 2022 10:04:25  log/asa-miovif.log.1-2022071112.backup
537277446  1758124     Feb 07 2024 16:47:53  log/asa-appagent.log
537277447  0           Apr 05 2022 11:06:45  log/asa-fxos_xml.log
537277458  0           Feb 09 2024 08:45:01  log/asa-ssp_ntp.log.sav.4
537277456  0           Jul 11 2022 13:24:33  log/stdout_offload_app.log
537277457  639         Jul 11 2022 14:36:20  log/lcore.log
537277450  0           Feb 09 2024 09:40:01  log/asa-ssp_ntp.log.sav.3
537277451  0           Feb 09 2024 10:40:01  log/asa-ssp_ntp.log.sav.2
537277452  0           Feb 09 2024 11:40:01  log/asa-ssp_ntp.log.sav.1
537277459  0           Feb 09 2024 12:40:01  log/asa-ssp_ntp.log.sav
537277345  3145898     Feb 09 2024 10:29:19  log/asa-ssp_ntp.log.5
537277443  3145773     Feb 09 2024 12:27:09  log/asa-ssp_ntp.log.3
537277449  819690      Feb 09 2024 13:41:24  log/asa-ssp_ntp.log.1
537277454  0           Feb 09 2024 13:40:01  log/asa-ssp_ntp.log
537277395  933717      Aug 30 2022 11:08:13  log/asa-miovif.log.5
537277347  802613      Aug 31 2022 15:21:18  log/asa-miovif.log.4
537277407  1184051     Feb 10 2023 12:43:21  log/asa-miovif.log.3
537277346  610452      Feb 10 2023 17:33:13  log/asa-miovif.log.2
537277455  704728      Feb 09 2024 09:27:21  log/asa-miovif.log.1
537277448  0           Nov 29 2023 07:30:01  log/asa-miovif.log
537277406  3145889     Feb 09 2024 11:28:14  log/asa-ssp_ntp.log.4
537277344  3145898     Feb 09 2024 13:26:03  log/asa-ssp_ntp.log.2
19199963  37230720    Feb 09 2022 03:02:46  asdm.bin
537277348  21          Apr 05 2022 11:06:45  smart-log
537277352  14521640    Feb 09 2024 13:05:32  smart-log/agentlog
17089740  38921800    Jul 11 2022 12:46:39  asdm-7151-150.bin
17089741  112373960   Jul 11 2022 12:55:03  asdm-openjre-7141-48.bin
17089742  35744052    Jul 11 2022 12:56:03  asdm-7141-48.bin
17089743  83043657    Jul 11 2022 13:07:46  anyconnect-win-4.10.05111-webdeploy-k9.pkg
17089744  34033084    Jul 11 2022 13:16:08  asdm-7131.bin
17089773  4096        Jan 28 2022 01:01:03  cores
   11  16384       Jan 28 2022 00:59:32  cores/lost+found
1774193  4096        Jan 28 2022 01:01:03  cores/sysdebug
1774194  40          Apr 28 2023 14:03:09  cores/sysdebug/tftpd_logs
17089748  0           Apr 05 2022 11:05:53  coredumpfsysimage.bin
17089749  4096        Jan 28 2022 01:01:03  coredumpfsys
   11  16384       Jan 28 2022 00:59:32  coredumpfsys/lost+found
1774193  4096        Jan 28 2022 01:01:03  coredumpfsys/sysdebug
1774194  40          Apr 28 2023 14:03:09  coredumpfsys/sysdebug/tftpd_logs
17089750  3552        Apr 28 2023 14:05:23  asa-cmd-server.log
17089751  39          Apr 28 2023 14:05:27  snortpacketinfo.conf
17089752  130709656   Jul 11 2022 10:59:27  asdm-openjre-7171-155.bin
17089753  51478176    Jul 11 2022 11:01:16  asdm-7171-155.bin
805315978  6           Jul 11 2022 11:20:25  packet-tracer
17089758  15916       Jul 11 2022 13:12:24  backup
17089759  37229568    Jul 11 2022 12:40:06  asdm-7161-150.bin
268643141  25          Apr 05 2022 11:07:15  coredumpinfo
268643142  59          Apr 05 2022 11:07:15  coredumpinfo/coredump.cfg
17089778  1937        Jul 11 2022 16:48:28  vpn.xml
17089768  15821       Aug 30 2022 10:42:43  backup_310822.old
17089765  14160       Oct 21 2022 09:04:47  backup211022.old
17089775  16282       Feb 10 2023 17:31:19  startup-5.cfg
17089734  6           Apr 05 2022 11:05:52  fxos
17089738  1462        Jul 11 2022 14:42:36  cspCfg.xml
17089746  117011512   Feb 07 2024 13:16:34  cisco-secure-client-win-5.1.2.42-webdeploy-k9.pkg

16106127360 bytes total (15071084544 bytes free)

Is there really no guide how to upgrade a Firepower 1010 with a new ASA
image?

What would you do in this situation?

Thanks a lot!



Bye
R.

[balaji.bandi]

Ok apologies i understood the issue you mentioned.

you already have 9.18 in the #show packages

isco-asa-fp1k.9.18.1.SPA                     9.18.1

the guide have below information :

Install the package.

scope auto-install

install security-pack version version

In the show package output, copy the Package-Vers value for the security-pack version number. The chassis installs the ASA image and reboots.