Firepower OS Version

[QUARK TARO]

I have asa5525-IPS firepower, how can I verify the OS version of firepower thru command line?

[Karsten Iwen]

From ASA-CLI:

show module sfr detail

[QUARK TARO]

This will only show the boot image version, I need to know the OS/package version.

[Karsten Iwen · Accepted solution]

That's strange, it should show the FP-software-version and that's what it does on my ASAs:

asa/pri/act# sh flash: | i boot
133 41598976 Nov 13 2015 08:23:40 asasfr-5500x-boot-5.4.0-763.img
asa/pri/act#

asa/pri/act# sh module sfr details | i version
Hardware version: N/A
Firmware version: N/A
Software version: 5.4.0.4-55
App. version: 5.4.0.4-55
asa/pri/act#

[QUARK TARO]

Thank You, I could find.

The running Boot Image:
asasfr-5500x-boot-5.3.1-152.img

The running IPS Software Image:
asasfr-sys-5.3.1-155.pkg

On the Cisco website the latest available boot image is asasfr-5500x-boot-6.0.0-1005.img & IPS software image is asasfr-sys-6.0.0-1005.pkg

Can I upgrade boot and sw image to the above latest? Is there any particular upgrade path I need to follow?

[Karsten Iwen · Accepted solution]

You first have to upgrade your FireSight MC to v6, then you can upgrade the ASAs.

But be aware that this is a 6.0.0 version ... 😉

For my productive environments I only upgraded to the latest 5.4 releases. Version 6 comes later ...

[QUARK TARO]

I could also find the following files under 5.4, where do I need to deploy these patchaes?

Cisco_Network_Sensor_Upgrade-5.4.0-763.sh
Cisco_Network_Sensor_Patch-5.4.0.4-55.sh

[Karsten Iwen]

You don't have to download them manually. In Firesight Management Center, go to System > Updates and deploy the patches to your ASA. If the patches don't show up, you have to trigger the download by pressing "Download Updates".

Be aware that applying these updates takes very long when starting with 5.3.x

[QUARK TARO]

My Firesight management appliance does not have the Internet connection, in such case I need to download them manually and deploy right?

[Karsten Iwen]

Yes, in that situation you download the patches to your PC, upload them to FS and apply them from there.