Convert Cisco FTD to ASA firmware

The Cisco firewall comes with the FTD firmware by default, and there are several reasons of using the ASA firmware on this Cisco new firewall. I have attached the steps below to let the Cisco firewall to run the ASA firmware by re-imaging it.

This is the same way to change from ASA firmware to FTD firmware.

  1. Download the ASA firmware from the URL below. (i m using Cisco 2110 as the Device Under Test) (https://software.cisco.com/download/home/286312080/type/280775065/release/9.16.3%20Interim) Recommanded to use the suggested version.
  2. Connect the console to the Cisco Firewall and go to the FXOS. I have named my device DUT below.
  3. type in the following:
    1. DUT# scope firmware
    2. DUT /firmware# download image http://srv_ip/cisco-asa-fp2k.9.16.3.19.SPA
      • this is to download the firmware from your server, the server can be http, https, ftp, scp, sftp, tftp, and usb.
    3. DUT / firmware # show download
      • while the firewall is downloading the firmware, we can use the following command to check the status of the process.
    4. DUT / firmware # show package
      • this is to list out the firmware in the Cisco firewall. Once you see the new firmware is in the list, then we can go to the next step.
      • remember the package-Vers number as we need this for step 6.
      • in this case, it will be 9.16.3.19
    5. DUT / firmware # scope auto-install
    6. DUT / firmware/auto-install # install security-pack version 9.16.3.19
      • Do not use filename for the installation !!
      • please use the version number from step 4.
      • Do you want to proceed ? (yes/no):yes
      • Do you want to proceed ? (yes/no):yes
      • this step will take around 10 minutes.
      • during the installation, we can check the progress with the “show detail” command.

Leave a Reply

Your email address will not be published. Required fields are marked *