cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4744
Views
15
Helpful
3
Replies

Warning!!!! SFR not supported on 5506 and 5515 running new 9.10(1) code

cbelcher
Level 1
Level 1

Hey guys just let you all know that the SFR Module on the 5512x and 5506 are no longer supported on the new 9.10 train!   You are stuck running 9.9x.  It bit me!  It wipes the SSD and you have to rebuild!

 

 

3 Replies 3

Marvin Rhoads
Hall of Fame
Hall of Fame

It's documented in the release notes:

 

https://www.cisco.com/c/en/us/td/docs/security/asa/asa910/release/notes/asarn910.html

 

It doesn't wipe the SSD - just the bits in the ASA running-config as noted:

 

No support in 9.10(1) for the ASA FirePOWER module on the ASA 5506-X series and the ASA 5512-X—The ASA 5506-X series and 5512-X no longer support the ASA FirePOWER module in 9.10(1) and later due to memory constraints. You must remain on 9.9(x) or lower to continue using this module. Other module types are still supported. If you upgrade to 9.10(1), the ASA configuration to send traffic to the FirePOWER module will be erased; make sure to back up your configuration before you upgrade. The FirePOWER image and its configuration remains intact on the SSD. If you want to downgrade, you can copy the ASA configuration from the backup to restore functionality.

It's fun when You go to download software and it says "ASA 5506-X with Firepower services" ... while actually firepower is not supported anymore... since 9.10.x release

 

image.png

That's why we should always check the release notes and any upgrade guides as part of any plan to move to a new release.

The Firepower 6.2.3 releases are still supported an being actively maintained when paired with ASA 9.8.x.

Review Cisco Networking for a $25 gift card