Cisco ASA5500 Update System and ASDM (From ASDM)

KB ID 0000073

Problem

Below is a walkthrough for upgrading the OS image and ASDM using the ASDM, this method does not require access to a TFTP server.

Warning:

Before upgrading/updating the ASA to version 8.3 (or Higher) Check to see if you have the correct amount of RAM in the firewall (“show version” command will tell you). This is VERY IMPORTANT if your ASA was shipped before February 2010. See the link below for more information.

ASA – Memory Error (Post upgrade to version 8.3)

Warning 2:

Be aware, if you are upgrading to an OS of 8.4(2) or newer you can no longer access the device via SSH when using the default username of “pix” you need to enable AAA authentication for SSH, do this before you reboot/reload the firewall or you may lock yourself out.

ASA Enable AAA LOCAL Authentication for SSH

Solution

1. Firstly make sure you have the latest system and ASDM images on your PC, you will need a valid service agreement and a CCO login with Cisco to download them.

2. Connect to the ASDM either via the client software or a web page pointed to https://IP_OF_THE ASA (NOTE you need to be on an IP that’s allowed to connect to to the ASA.)

3. Tools > Upgrade software from Local Computer, or Upload Image on Local PC, on older versions.

4. Select “ASA Image” > Browse Local.

5. The image will upload, if it complains there is not enough space, the go to tools, file management and delete the old image (yes it’s safe to do that, as long as you don’t reboot the firewall or have a power cut).

6. ‘Yes’ to use the new image..

Note: On older versions o the ASDM you have to set this manually, (Configuration > Device Administration > Boot Image > Boot Config File Path Section > Browse Flash).

Note: On even older ASDM’s this is on the Properties Page

7. OK.