How to download Cisco ASA SFR.pkg

Lost & Found · ‎08-25-2015

Hi,

I Have a newly purchase Cisco ASA 5512X with firepower now I can't find the PKG or how to enable it.

I tried to use the ff command.

asasfr-boot> system install [noconfirm] url

and

system install http://asasfr-sys-5.3.1-44.pkg

SHOW FLASH

--#-- --length-- -----date/time------ path
10 4096 Jun 30 2015 18:54:36 log
19 4096 Jun 30 2015 18:55:14 crypto_archive
20 4096 Jun 30 2015 18:55:28 coredumpinfo
21 59 Jun 30 2015 18:55:28 coredumpinfo/coredump.cfg
115 52457472 Jun 30 2015 18:57:18 asa922-4-smp-k8.bin
116 41601024 Jun 30 2015 18:58:50 asasfr-5500x-boot-5.3.1-152.img
117 24070880 Jun 30 2015 19:28:18 asdm-7221.bin
118 2377 Aug 19 2015 00:08:16 AnyConnect_client_profile.xml
119 12998641 Jun 30 2015 19:32:12 csd_3.5.2008-k9.pkg
120 4096 Jun 30 2015 19:32:14 sdesktop
130 1462 Jun 30 2015 19:32:14 sdesktop/data.xml
121 6487517 Jun 30 2015 19:32:14 anyconnect-macosx-i386-2.5.2014-k9.pkg
122 6689498 Jun 30 2015 19:32:14 anyconnect-linux-2.5.2014-k9.pkg
123 4678691 Jun 30 2015 19:32:16 anyconnect-win-2.5.2014-k9.pkg
124 342 Aug 15 2015 00:47:38 anyconnect_client_profile.xml
131 16201581 Aug 18 2015 18:29:30 anyconnect-win-4.0.00061-k9.pkg

also I have no access to download the file on Cisco Website.

Any idea how to solve this?

thank you

-ACR

Marvin Rhoads · ‎08-25-2015

Normally you don't need to re-image and load the pkg into the software module.

What did it start with and what is it now? ("show module" from the ASA)

For the file access you need to contact your vendor. If they are an authorized Cisco reseller they can add your entitlement. You can also contact the TAC and explain that you need your cisco.com ID associated.

(Edit - fixed typo)

Lost & Found · ‎08-25-2015

Hi,

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable

(There is no SFR in this line.)

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Recover Not Applicable

also what is the meaning of DD?

thanks

Marvin Rhoads · ‎08-26-2015

OK, so you're definitely in recover mode. The package file can be found at this URL.

As I noted earlier, your reseller or TAC can add (sorry - typo earlier) your entitlement to have access to download it.

Lost & Found · ‎08-26-2015

Hi,

How about the .pkg file do i need to install it on my ASA?

Please see the link.

https://software.cisco.com/download/release.html?mdfid=286271174&flowid=70726&softwareid=286277393&release=5.3.1&relind=AVAILABLE&rellifecycle=&reltype=latest

Thank you

Marvin Rhoads · ‎08-26-2015

The pkg file installs on top of and replaces the boot image that you currently have on the FirePOWER software module.

There's not enough space on the ASA proper for the pkg - that's why you need the boot image first and then have to install the pkg from a remote location (via tftp, ftp, scp etc.).

Think of the ASA as kind of a hypervisor (like VMware) and the FirePOWER module as a guest operating system.