01-24-2023 01:56 PM
Is anyone able to direct me in obtaining Rommon Firmware update 2.1.9.8 as mentioned in multiple threads? ASA 5500X download section does not have this available vs the 5516X series. I have 2 5555X units 1 with 2.1.9.5 which does have some issues with the sensors which 2.1.9.8 Rommon corrects.
Rebooting... Cisco BIOS Version:9B2C109A
Build Date:05/15/2013 16:34:44 2.1.9.8 Rommon
Booting from ROMMON
Cisco Systems ROMMON Version (2.1(9)8) #1:
Rebooting... Cisco BIOS Version:9B2C105A
Build Date:06/07/2011 08:31:32 2.1.9.5 Rommon
Booting from ROMMON
Cisco Systems ROMMON Version (2.1(9)5) #0:
01-24-2023 02:04 PM
01-24-2023 02:21 PM
what are you running on - is this ASA with SFR Modules ?
can you post the show version, and show the modules?
Look at the compatible version :
https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#id_59075
01-25-2023 12:37 PM
To clarify on my post inquiry, I am only looking to find a Rommon download to complete this upgrade. SFR firepower, installation guide to the rommon is not what I am seeking. I am only looking for the upgrade file ex. 2198.SPA file.
01-25-2023 04:50 PM
still i look forward below output - i can answer any better
can you post the show version, and show the modules?
01-26-2023 06:52 AM
Cisco Adaptive Security Appliance Software Version 9.14(4)17
SSP Operating System Version 2.8(1.191)
Device Manager Version 7.19(1)
Compiled on Wed 19-Oct-22 05:28 GMT by builders
System image file is "disk0:/asa9-14-4-17-smp-k8.bin"
Config file at boot was "startup-config"
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-SB-PLUS-0005
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Baseboard Management Controller (revision 0x1) Firmware Version: 2.1
Rebooting... Cisco BIOS Version:9B2C105A
Build Date:06/07/2011 08:31:32
------------------ show module 0 detail ------------------
Card Type: Cisco ASA 5555 Appliance with 8 GE ports, 1 GE mgmt
Model: ASA5555
Hardware version: 1.0
Serial Number: FCHXXXXX
Firmware version:
Software version: 9.14(4)17
MAC Address Range:
Data Plane Status: Not Applicable
Console session: Not ready
Status: Up Sys
Cisco Adaptive Security Appliance Software Version 9.14(4)17
SSP Operating System Version 2.8(1.191)
Device Manager Version 7.19(1)
Compiled on Wed 19-Oct-22 05:28 GMT by builders
System image file is "disk0:/asa9-14-4-17-smp-k8.bin"
Config file at boot was "startup-config"
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-SB-PLUS-0005
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Baseboard Management Controller (revision 0x1) Firmware Version: 2.4
Rebooting... Cisco BIOS Version:9B2C109A
Build Date:05/15/2013 16:34:44
------------------ show module 0 detail ------------------
Card Type: ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt
Model: ASA5555
Hardware version: 1.0
Serial Number: FCHXXXXXX
Firmware version: 2.1(9)8
Software version: 9.14(4)17
MAC Address Range:
Data Plane Status: Not Applicable
Console session: Not ready
Status: Up Sys
04-26-2024 01:16 PM - edited 04-26-2024 01:18 PM
Information about the FTD code, might be the same thing for asa image upgrade.
ROMMON Software | Boot Image | System Software | |
Purpose | To update the firmware of an ASA. | To load an ASA with the network config, download the system software, and begin setup. | To install the features of the FTD system. |
Low-end ASA (5506-X, 5508-X, 5516-X) | Firmware release 1.1.8 or greater is required. Use the *.SPA file to upgrade firmware. | Use a *.lfbff file to load a low-end ASA with the FTD boot image. | Use a *.pkg file to install the FTD system software package. You can use the same system software package on any low-end and midrange ASA hardware models. |
Midrange ASA (5512-X, 5515-X, 5525-X, 5545-X, 5555-X) | Not necessary to update the default firmware version. | Use a *.cdisk file to load a midrange ASA with the FTD boot image. |
I was wondering the same question.... for the 5555.
Not sure if you already upgrade yours.
Source:
https://www.ciscopress.com/articles/article.asp?p=2916289
From the upgrade guide.
Rommon is missing in mid range
https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide