How to download Cisco ASA SFR.pkg

[Lost & Found]

Hi,

I Have a newly purchase Cisco ASA 5512X with firepower now I can't find the PKG or how to enable it.

I tried to use the ff command.

asasfr-boot> system install [noconfirm] url

and 

system install http://asasfr-sys-5.3.1-44.pkg 

SHOW FLASH 

--#--  --length--  -----date/time------  path
   10  4096        Jun 30 2015 18:54:36  log
   19  4096        Jun 30 2015 18:55:14  crypto_archive
   20  4096        Jun 30 2015 18:55:28  coredumpinfo
   21  59          Jun 30 2015 18:55:28  coredumpinfo/coredump.cfg
  115  52457472    Jun 30 2015 18:57:18  asa922-4-smp-k8.bin
  116  41601024    Jun 30 2015 18:58:50  asasfr-5500x-boot-5.3.1-152.img
  117  24070880    Jun 30 2015 19:28:18  asdm-7221.bin
  118  2377        Aug 19 2015 00:08:16  AnyConnect_client_profile.xml
  119  12998641    Jun 30 2015 19:32:12  csd_3.5.2008-k9.pkg
  120  4096        Jun 30 2015 19:32:14  sdesktop
  130  1462        Jun 30 2015 19:32:14  sdesktop/data.xml
  121  6487517     Jun 30 2015 19:32:14  anyconnect-macosx-i386-2.5.2014-k9.pkg
  122  6689498     Jun 30 2015 19:32:14  anyconnect-linux-2.5.2014-k9.pkg
  123  4678691     Jun 30 2015 19:32:16  anyconnect-win-2.5.2014-k9.pkg
  124  342         Aug 15 2015 00:47:38  anyconnect_client_profile.xml
  131  16201581    Aug 18 2015 18:29:30  anyconnect-win-4.0.00061-k9.pkg

also I have no access to download the file on Cisco Website. 

Any idea how to solve this?

thank you

-ACR

[Marvin Rhoads]

Normally you don't need to re-image and load the pkg into the software module.

What did it start with and what is it now? ("show module" from the ASA)

For the file access you need to contact your vendor. If they are an authorized Cisco reseller they can add your entitlement. You can also contact the TAC and explain that you need your cisco.com ID associated.

(Edit - fixed typo)

[Lost & Found]

Hi,

Mod  SSM Application Name           Status           SSM Application Version
---- ------------------------------ ---------------- --------------------------
 ips Unknown                        No Image Present Not Applicable
cxsc Unknown                        No Image Present Not Applicable

(There is no SFR in this line.)

Mod  Status             Data Plane Status     Compatibility
---- ------------------ --------------------- -------------
   0 Up Sys             Not Applicable
 ips Unresponsive       Not Applicable
cxsc Unresponsive       Not Applicable
 sfr Recover            Not Applicable

also what is the meaning of DD?

thanks

[Marvin Rhoads]

OK, so you're definitely in recover mode. The package file can be found at this URL.

As I noted earlier, your reseller or TAC can add (sorry - typo earlier) your entitlement to have access to download it.

[Lost & Found]

Hi,

How about the .pkg file do i need to install it on my ASA? 

Please see the link.

https://software.cisco.com/download/release.html?mdfid=286271174&flowid=70726&softwareid=286277393&release=5.3.1&relind=AVAILABLE&rellifecycle=&reltype=latest

Thank you

[Marvin Rhoads]

The pkg file installs on top of and replaces the boot image that you currently have on the FirePOWER software module.

There's not enough space on the ASA proper for the pkg - that's why you need the boot image first and then have to install the pkg from a remote location (via tftp, ftp, scp etc.).

Think of the ASA as kind of a hypervisor (like VMware) and the FirePOWER module as a guest operating system.