12-08-2023 07:52 AM
Hello,
I'm trying to upgrade our ASA 5506-x from 9.12(1) version to 9.19 version and downloaded the 9.12 version but after upgrade the ASA and asdm my asa still showing the old version 9.12 but asdm was upgrade.
Here is the show version command:
System image file is "disk0:/asa0-12-1-2-lfbff-k8.SPA"
First I tried to use this asa version for upgrading "asa9-19-1-smp-k8.bin" but after reload the system still was old version and then tried to use this version to upgrade it "asa9-19-1-lfbff-k8.SPA" but the result was same and after reload and reboot the ASA still showing the old version.
Could you please let me know what is the issue and why still showing the old version?
Thanks
Babak
Solved! Go to Solution.
12-08-2023 08:04 AM - edited 12-08-2023 08:04 AM
@TAC-itsupport you have to use the SPA file, as you only have the option to download the SPA upgrade file https://software.cisco.com/download/home/286283326/type/280775065/release/9.12.2
12-08-2023 08:49 AM
@TAC-itsupport yes I mentioned 9.16 is the latest supported version for the 5506-X in the first reply. I said that a .SPA file is the only option to download not a .bin file and provided an example, which just happened to be 9.12. https://software.cisco.com/download/home/286283326/type/280775065/release/9.16.4
12-08-2023 07:55 AM
@TAC-itsupport the ASA 5506-X does not support 9.19. 9.16 is the latest supported version -https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html
12-08-2023 08:00 AM
Thank you Rob. one more question, should I use " .bin" version or ".SPA" for upgrade.
My current image version is 9-12-1-2-lfbff-k8.SPA so as I know the . SPA use for multi core ! is it correct?
Thanks
12-08-2023 08:04 AM - edited 12-08-2023 08:04 AM
@TAC-itsupport you have to use the SPA file, as you only have the option to download the SPA upgrade file https://software.cisco.com/download/home/286283326/type/280775065/release/9.12.2
12-08-2023 08:45 AM
Sorry Rob, you mentioned I just have one option to download but that version on the link is 9.12 and my current version is 9.12
So if the final version for 5506-x is 9.16(x) can I use 9.16 on this link "https://software.cisco.com/download/home/279513399/type/280775065/release/9.16.4 "
12-08-2023 08:49 AM
@TAC-itsupport yes I mentioned 9.16 is the latest supported version for the 5506-X in the first reply. I said that a .SPA file is the only option to download not a .bin file and provided an example, which just happened to be 9.12. https://software.cisco.com/download/home/286283326/type/280775065/release/9.16.4
12-08-2023 08:13 AM
FYI all 5500-X hardware is multicore. The "smp" denotes that - symmetric multiprocessor.
SPA denotes that the image is digitally signed with Cisco Production Key "A". That feature is to validate software authenticity and protect against supply chain compromises.
https://community.cisco.com/t5/network-security/cisco-asa-image-versions/td-p/2908797
12-08-2023 08:15 AM
Thank you Marvin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide