Upgrading ASA 5506-x

[TAC-itsupport]

Hello,

I'm trying to upgrade our ASA 5506-x from 9.12(1) version to 9.19 version and downloaded the 9.12 version but after upgrade the ASA and asdm my asa still showing the old version 9.12 but asdm was upgrade.

Here is the show version command:

System image file is "disk0:/asa0-12-1-2-lfbff-k8.SPA"

First I tried to use this asa version for upgrading "asa9-19-1-smp-k8.bin" but after reload the system still was old version and then tried to use this version to upgrade it "asa9-19-1-lfbff-k8.SPA" but the result was same and after reload and reboot the ASA still showing the old version.

Could you please let me know what is the issue and why still showing the old version?

Thanks

Babak

[Rob Ingram]

@TAC-itsupport the ASA 5506-X does not support 9.19. 9.16 is the latest supported version -https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html

[TAC-itsupport]

Thank you Rob. one more question, should I use " .bin" version or ".SPA" for upgrade.

My current image version is 9-12-1-2-lfbff-k8.SPA so as I know the . SPA use for multi core ! is it correct?

Thanks

[Rob Ingram · Accepted solution]

@TAC-itsupport you have to use the SPA file, as you only have the option to download the SPA upgrade file https://software.cisco.com/download/home/286283326/type/280775065/release/9.12.2

[TAC-itsupport]

Sorry Rob, you mentioned I just have one option to download but that version on the link is 9.12 and my current version is 9.12

So if the final version for 5506-x is 9.16(x) can I use 9.16 on this link "https://software.cisco.com/download/home/279513399/type/280775065/release/9.16.4 "

[Rob Ingram · Accepted solution]

@TAC-itsupport yes I mentioned 9.16 is the latest supported version for the 5506-X in the first reply. I said that a .SPA file is the only option to download not a .bin file and provided an example, which just happened to be 9.12. https://software.cisco.com/download/home/286283326/type/280775065/release/9.16.4

[Marvin Rhoads]

FYI all 5500-X hardware is multicore. The "smp" denotes that - symmetric multiprocessor.

SPA denotes that the image is digitally signed with Cisco Production Key "A". That feature is to validate software authenticity and protect against supply chain compromises.

https://community.cisco.com/t5/network-security/cisco-asa-image-versions/td-p/2908797

[TAC-itsupport]

Thank you Marvin