11-25-2015 06:46 AM - edited 03-11-2019 11:56 PM
I have asa5525-IPS firepower, how can I verify the OS version of firepower thru command line?
Solved! Go to Solution.
11-25-2015 08:04 AM
That's strange, it should show the FP-software-version and that's what it does on my ASAs:
asa/pri/act# sh flash: | i boot
133 41598976 Nov 13 2015 08:23:40 asasfr-5500x-boot-5.4.0-763.img
asa/pri/act#
asa/pri/act# sh module sfr details | i version
Hardware version: N/A
Firmware version: N/A
Software version: 5.4.0.4-55
App. version: 5.4.0.4-55
asa/pri/act#
11-25-2015 08:29 AM
You first have to upgrade your FireSight MC to v6, then you can upgrade the ASAs.
But be aware that this is a 6.0.0 version ... ;-)
For my productive environments I only upgraded to the latest 5.4 releases. Version 6 comes later ...
11-25-2015 07:43 AM
From ASA-CLI:
show module sfr detail
11-25-2015 07:50 AM
This will only show the boot image version, I need to know the OS/package version.
11-25-2015 08:04 AM
That's strange, it should show the FP-software-version and that's what it does on my ASAs:
asa/pri/act# sh flash: | i boot
133 41598976 Nov 13 2015 08:23:40 asasfr-5500x-boot-5.4.0-763.img
asa/pri/act#
asa/pri/act# sh module sfr details | i version
Hardware version: N/A
Firmware version: N/A
Software version: 5.4.0.4-55
App. version: 5.4.0.4-55
asa/pri/act#
11-25-2015 08:15 AM
Thank You, I could find.
The running Boot Image:
asasfr-5500x-boot-5.3.1-152.img
The running IPS Software Image:
asasfr-sys-5.3.1-155.pkg
On the Cisco website the latest available boot image is asasfr-5500x-boot-6.0.0-1005.img & IPS software image is asasfr-sys-6.0.0-1005.pkg
Can I upgrade boot and sw image to the above latest? Is there any particular upgrade path I need to follow?
11-25-2015 08:29 AM
You first have to upgrade your FireSight MC to v6, then you can upgrade the ASAs.
But be aware that this is a 6.0.0 version ... ;-)
For my productive environments I only upgraded to the latest 5.4 releases. Version 6 comes later ...
11-25-2015 11:13 AM
I could also find the following files under 5.4, where do I need to deploy these patchaes?
Cisco_Network_Sensor_Upgrade-5.4.0-763.sh
Cisco_Network_Sensor_Patch-5.4.0.4-55.sh
11-25-2015 11:37 AM
You don't have to download them manually. In Firesight Management Center, go to System > Updates and deploy the patches to your ASA. If the patches don't show up, you have to trigger the download by pressing "Download Updates".
Be aware that applying these updates takes very long when starting with 5.3.x
11-25-2015 11:43 AM
My Firesight management appliance does not have the Internet connection, in such case I need to download them manually and deploy right?
11-25-2015 12:52 PM
Yes, in that situation you download the patches to your PC, upload them to FS and apply them from there.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide