10-25-2023 05:11 AM
Hi,
We recently took over management of a customer's network and they're running Cisco ASA 5516-X units with Firepower modules. I'm fairly new to these units so please forgive my lack of knowledge.
The units are a little out of date and I wish to bring them up to the latest supported version however I've noticed some issues I believe I should resolve before attempting to upgrade them.
We have a total of 3 units. 2 are on our main site in an Active/Standby pair and a third at a remote site connect back via a site-to-site VPN. All of them have their Firepower modules managed by FMC on the main site.
I have recently upgraded FMC to 7.2.5 without issues however I have noticed that both our Standby unit and our remote site unit is reporting High Unmanaged Disk Usage on /Volume.
I've spent quite some time researching however haven't been able to find a clear answer. I'm focusing on the remote unit first in the hope that once I resolve that one it'll be the same issue with our Standby unit.
After connecting via SSH to the Firepower module on the remote unit, I used du to find that the following directory is very large, around 38GB:
/Volume/6.7.0/sf/SRU
Inspecting the directory shows a lot of files named Cisco_Firepower_SRU-XXXX-XX-XX-XXX-vrt.sh.REL.tar where the X represents a date and a sequential number. These date all the way back to 2018.
I could be barking up the wrong tree completely here but my feeling is that these files shouldn't be taking up that much space and probably should be cleared out.
Is this the case, and is it safe to delete these files? Which should I leave in place?
Are there other locations that should be checked for erroneous files as well?
Thanks for your help.
-Iain.
Solved! Go to Solution.
10-25-2023 10:00 AM
You are correct that the old SRU files can be safely deleted. There have been several bugs over the years that can cause buildup of unneeded files. They are mostly fixed in the new releases but old file instances are not automatically removed.
The ASA 5516-X is past end of sales but it can be upgraded to Firepower 7.0.x. (7.0.6 is the latest at this time.)
10-25-2023 10:00 AM
You are correct that the old SRU files can be safely deleted. There have been several bugs over the years that can cause buildup of unneeded files. They are mostly fixed in the new releases but old file instances are not automatically removed.
The ASA 5516-X is past end of sales but it can be upgraded to Firepower 7.0.x. (7.0.6 is the latest at this time.)
10-26-2023 12:46 AM
Thank you, I'll give it a go. I'm assuming I should just leave the most recent SRU file in place. I'll probably just delete the majority of them apart from the most recent couple to see if that resolves my issue.
10-26-2023 07:12 AM
Thanks again, cleared out the SRUs and resolved the issue.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide