Pull image from flash

[mumbles202]

I'm in a bit of a pickle.  I have 2 PIX 515E devices that I want to setup for active/passive failover.  1 of them was upgraded from 6.3(3) to 6.3(5), but the backup unit was never done.  Now I need to upgrade the backup unit so I can configure the failover, but I'm unable to locate where the original download of the .bin file was.  I thought I read it was do a "copy flash tftp" to backup the image, but when I try to do that it get an error which seems to indicate you can only copy from x to flash (copy tftp flash, etc).  Is that right?  Normally I like to backup the old image before I flash a new one so I would think this would be a standard thing you can do.  When I do a sh flash it just has file0, file1 etc.  From what I've read file0 should be the image that I need.

[Jouni Forss]

Hi,

Hmm, I remember PIX firewalls having the filenames with the version number. Cant be 100% sure as its been sometime when I have had anything to do with them.

On the Cisco FWSM though there were some things with the image file names that was a bit different from PIX and ASA use.

Some older posts here on the forums would seem to suggest that you cant copy from PIX to TFTP but only TFTP to PIX.

Then again there is a Cisco document that mentions 6.x software and the command "copy flash tftp" so I am not quite sure what the situation is.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml#tftp

I guess if it really doesnt work then you will have to get the software from somewhere else.

Naturally if you have a service contract with Cisco you can simply download it from the Cisco site.

I wonder if the PIX had an internal Flash card that could be removed. ASAs certainly have one (atleast some models if not all). Though then again I am not sure if you could take one from the other unit (while other is in use) to be able to load the software from the Flash on some other device, i have no idea as I have never had to even think about it.

- Jouni

[mumbles202]

Yes, I'm more familiar with ASA's and from there it is relatively simple.  I saw that documentation which is why I thought I'd be able to pull the image, but alas the command doesn't take.  It didn't have any externally accessible flash or I would've tried to go that route as well.  I didn't try pulling up the web gui, if it even has one.  Maybe that is something to try next time.