PRSM update

[bondandrey]

Hello!

I have ASA5515 with WSE license (PRSM version 9.3.2.1 (9)).

On te Web UI Configuration > Updates I see following error:

Device is unable to receive updates from the Cisco update server. Please check your network and HTTP proxy server settings.

I find out that I can't allow Internet access on management interface. 

How can I update PRSM modules?

Thanks!

[Marvin Rhoads]

PRSM requires Internet access to update from Cisco. There's no option to download them separately and push them up to PRSM (single device mode) manually.

You could buy PRSM server (multi-device mode) which runs on a VM off-box. It would then access Internet and push the updates to the CX module on the ASA.

[bondandrey]

Thank you, Marvin!

But I thought that there is another way to solve this issue for single device mode.

The only thing that came to my mind is to put SOHO router between management and internal network.

[Marvin Rhoads]

As long as you can reach the Internet from the physical ASA management interface that PRSM uses for its own unique address, updates will work.

Whether that's via your "normal" outbound path or via some other purposeful device you put in the path, PRSM doesn't care. As long as it can get to the Cisco update server via https it is happy.