Cisco SFR Session – Cannot Exit To Command Line

KB ID 0001259


This tripped me up once before, and I didn’t document it! Normally if you have a console session open with your FirePOWER Module, (that you opened with a ‘session sfr‘ command), then you can just quit, and exit back to the firewall by typing ‘exit‘, like so;

ciscoasa# session sfr
Opening command session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.

Cisco ASA5512 v6.1.0 (build 330)
firepower login: admin
Last login: Tue Nov 22 15:49:51 UTC 2016 on pts/0

> exit
Remote card closed command session. Press any key to continue.
Command session with module sfr terminated.

But if you have a console session open with the module, (that you opened with a ‘session sfr console‘ command), then typing exit simply dumps you back at the login screen!

ciscoasa(config)# session sfr console


Cisco FirePOWER Services Boot Image 6.1.0

asasfr login:



Well that’s annoying! You need to log back into the SFR module, then exit with the following key sequence;

Press ‘Ctrl+Shift+6′

SFR escape sequence

Then release those keys and press ‘x

Cisco SFR Exit Keystrokes


Related Articles, References, Credits, or External Links


Author: PeteLong

Share This Post On


  1. wow! thank you Pete for this article. I always logout and reopen the windows

    Post a Reply
  2. Thank you for the info Pete! Thanks.

    Post a Reply
  3. Hi,

    I facing the same issue with my sfr. I logged in through “session sfr console” and when I exit it again come back to login page of the sfr.

    Now the solution you have given above though it is correct, can you tell what if I have connected through OOB connection from remote end via console on the firewall. If do ctrl+shift+6 hold and x, it is coming out directly on my OOB menu mgmt and when I resume connection again it starts with sfr login page again.

    Really need help as nobody is there allowed to connect console at all. 🙁


    Post a Reply
    • Hi Mahesh, to be honest I don’t see the problem, once the SFR is built it’s very rare that you need to connect to it again, and I can’t think of a reason I’d need to get into it from OOB management – One it’s setup the only time you would ever need to get into it again is if you have rebuilt it.

      The only time this would present a problem ‘out of hours’, is if the SFR is set to ‘fail-closed’, which you can fix without going into a console session anyway?


      Post a Reply
  4. Commenting to say thanks 🙂

    Post a Reply

Submit a Comment

Your email address will not be published. Required fields are marked *