Cisco ASA5500 Update System and ASDM (From ASDM)

Do the same from command line

KB ID 0000073

Problem

Below is a walkthrough for upgrading the OS image and ASDM using the ASDM, this method does not require access to a TFTP server.

Warning:

Before upgrading/updating the ASA to version 8.3 (or Higher) Check to see if you have the correct amount of RAM in the firewall (“show version” command will tell you). This is VERY IMPORTANT if your ASA was shipped before February 2010. See the link below for more information.

ASA – Memory Error (Post upgrade to version 8.3)

Warning 2:

Be aware, if you are upgrading to an OS of 8.4(2) or newer you can no longer access the device via SSH when using the default username of “pix” you need to enable AAA authentication for SSH, do this before you reboot/reload the firewall or you may lock yourself out.

ASA Enable AAA LOCAL Authentication for SSH

Solution

1. Firstly make sure you have the latest system and ASDM images on your PC, you will need a valid service agreement and a CCO login with Cisco to download them.

screenshot-2017-03-08-21-46-00

 

2. Connect to the ASDM either via the client software or a web page pointed to https://IP_OF_THE ASA (NOTE you need to be on an IP that’s allowed to connect to to the ASA.)

ASDM Logon

3. Tools > Upgrade software from Local Computer, or Upload Image on Local PC, on older versions.

Upgrade ASA from Local Computer.

4. Select “ASA Image” > Browse Local.

Upload new image to Cisco ASA

5. The image will upload, if it complains there is not enough space, the go to tools, file management and delete the old image (yes it’s safe to do that, as long as you don’t reboot the firewall or have a power cut).

Upgrade Cisco ASA

6. ‘Yes’ to use the new image..

Update ASA boot Image

Note: On older versions o the ASDM you have to set this manually, (Configuration > Device Administration > Boot Image > Boot Config File Path Section > Browse Flash).

Note:¬†On even older ASDM’s this is on the Properties Page

 

7. OK.

OK to reboot ASA

 

Update ASDM from the ASDM

8. Tools > Upgrade software from Local Computer, or Upload Image on Local PC, on older versions.

Update ASDM from ASDM

 

9. This time select ASDM > Browse to the ASDM image > Upload Image.

update ASA guy

 

10. The new image will be uploaded to the firewall.

ASDM Upgrade

 

11. Yes.

Change ASDM Image

Note: On older versions this needs to be set on Configuration > Device Administration > Boot Image > ASDM Image File Path Section > Browse Flash.

Note: On even older versions this is on the Properties Page.

 

12. OK > Save..

Save ASA Config

 

13. Tools > System Reload.

Reload ASA from ASDM

 

14. Select ASDM Image > Browse Local.

Restart ASA from ASDM

 

 

Related Articles, References, Credits, or External Links

Cisco ASA5500 Update System and ASDM (From CLI)

Author: Migrated

Share This Post On