The Cisco firewall comes with the FTD firmware by default, and there are several reasons of using the ASA firmware on this Cisco new firewall. I have attached the steps below to let the Cisco firewall to run the ASA firmware by re-imaging it.
This is the same way to change from ASA firmware to FTD firmware.
- Download the ASA firmware from the URL below. (i m using Cisco 2110 as the Device Under Test) (https://software.cisco.com/download/home/286312080/type/280775065/release/9.16.3%20Interim) Recommanded to use the suggested version.
- Connect the console to the Cisco Firewall and go to the FXOS. I have named my device DUT below.
- type in the following:
- DUT# scope firmware
- DUT /firmware# download image http://srv_ip/cisco-asa-fp2k.9.16.3.19.SPA
- this is to download the firmware from your server, the server can be http, https, ftp, scp, sftp, tftp, and usb.
- DUT / firmware # show download
- while the firewall is downloading the firmware, we can use the following command to check the status of the process.
- DUT / firmware # show package
- this is to list out the firmware in the Cisco firewall. Once you see the new firmware is in the list, then we can go to the next step.
- remember the package-Vers number as we need this for step 6.
- in this case, it will be 9.16.3.19
- DUT / firmware # scope auto-install
- DUT / firmware/auto-install # install security-pack version 9.16.3.19
- Do not use filename for the installation !!
- please use the version number from step 4.
- Do you want to proceed ? (yes/no):yes
- Do you want to proceed ? (yes/no):yes
- this step will take around 10 minutes.
- during the installation, we can check the progress with the “show detail” command.