FPR-2110 (ASA-Image): Correct option at image upload?

[swscco001]

Hello everybody,

I have been tasked to upgrade a HA pair of two FPR-2110 running rel. 9.18(4)22.

I checked the upgrade guide (see screen dump attached):
https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_27300

In Step 3 I read "From the Image to Upload drop-down list, choose ASA." but in the drop-down list there
is no option "ASA" (see screen dump attached).

What option I have to take to upload the ASA image file cisco-asa-fp2k.9.20.3.10.SPA ?

Thanks a  lot!

Bye
R.

[Marvin Rhoads]

You should be uploading that file via Firepower Chassis Manager (FCM) GUI, not via ASDM.

See steps 2 and 4 at the following link:

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_57913

[swscco001 · Accepted solution]

Hi Marvin,

thanks for your fast Reply!

That means that the guide:
https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_27300
is wrong in this matter.

Is it correct to say that *.SPA files cannot be copied to a Firewall using the ASDM
and we need to use the the FXOS CLI or the Chassis Manager (FCM) GUI?

Thanks a lot!

Bye
R.

[Sheraz.Salim]

As @Marvin Rhoads mentioned the cisco documentation the right process/steps.

-Is it correct to say that *.SPA files cannot be copied to a Firewall using the ASDM
Yes, this is correct unless otherwise you using vASA or ASA55XX series.

-And we need to use the the FXOS CLI or the Chassis Manager (FCM) GUI?

Yes,Correct. FXOS CLI or FCM. And if this appliance is with FMC then from FMC you push the image to FTD.

[swscco001]

Hi Sheraz,

thanks for your reply!

At vASA or ASA55XX series the image file has the .bin extension.

So the conclusion for ASA-images is:

.bin files (vASA or ASA55XX series): use the ASDM or the ASA CLI 
.SPA files (Firepower appliances): use the Chassis Manager (FCM) GUI or the FXOS CLI

Thanks a lot!



Bye
R.