Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Upgrade Cisco ASA 5505

Posted on 2014-03-29
Medium Priority
1 Endorsement
Last Modified: 2014-10-11
Hi, I have Cisco ASA5505 , its running code 6.0 , I just wanted to know what can be the latest Code I can have on ASA 5505 and procedure to upgrade this .
Question by:annasad
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Author Comment

ID: 39964204
I just googled it to find above info , looking forward , how to upgrade step by step .. I might find it too .. but just looking this new info

Assisted Solution

by:Dash Amr
Dash Amr earned 1000 total points
ID: 39964227
Hi Annasad,
few things to consider before moving ahead with the update Specially from 6.0

You need a valid service contract for Cisco ASA device to load the ASA software image from Cisco website. usually it takes some time (days) until your new service contract is registered and activated
Don't forget to check the RAM and FLASH memory needs for those newer OS"s.

the latest Update compatible will be ASA 9.1(4) ASDM 7.1(5).


Step By Step Guide for the Update Procedure
Download the software

First things first. In order to upgrade the software, you’re going to actually acquire the software. As long as you have a valid service contract, you should be able to login to cisco.com and download it. If you don’t have the ability to download it from Cisco, well, you’re on your own.

Check for free space
As I mentioned before Depending on your ASA hardware version (and what you already have saved in there), the amount of flash memory you have available will vary. Before proceeding, you’ll want to verify that you have enough space available to hold the ASA software (and ASDM, if you’re going to upgrade that too).

ciscoasa# show flash: | include free
127111168 bytes total (93192192 bytes free)

Here in the example, I have a little over 93 MB available which is plenty. If you don’t have enough free space, you’ll need to delete some other crap you’re hoarding there in order to make enough space.

Dump the software on a TFTP server

I’ll be copying the software over from a TFTP server and I’ve already made it available there. If you don’t have a TFTP server available it’s also possible to put it on a web server and use HTTP or HTTPS to transfer it to your ASA.

As last resorts, you can also copy it from a Windows fileshare (using SMB/CIFS) or, $deity forbid, Xmodem. Do the needful

Alright, now we’re to the good part.

ciscoasa# show version | include image
System image file is "disk0:/asa822-k8.bin"
ciscoasa# show asdm image
Device Manager image file, disk0:/asdm-635.bin

As you can see, this ASA is currently running version 8.2(2) along with ASDM version 6.3.5. Because Cisco recommends that you stay within the same major version (unless you need the features introduced in newer major versions), I’m going to upgrade to 8.2(5). We’ll also upgrade ASDM to version 6.4.5 as well.

For example, here’s the information we need to complete the upgrade process:

    TFTP server IP address:
    ASA 8.2(5) filename: asa825-k8.bin
    ASDM 6.4.5 filename: asdm-645.bin

Here we go!

ciscoasa# copy tftp flash

Address or name of remote host []?

Source filename []? asa825-k8.bin

Destination filename [asa825-k8.bin]?

Accessing tftp://!!!!!!!!!!!!!!!!!!!
Writing file disk0:/asa825-k8.bin...
15390720 bytes copied in 42.870 secs (366445 bytes/sec)

Perfect. Now, let’s copy over the updated version of ASDM as well.

ciscoasa# copy tftp flash

Address or name of remote host []?

Source filename [asa825-k8.bin]? asdm-645.bin

Destination filename [asdm-645.bin]?

Accessing tftp://!!!!!!!!!!!!!!!!!!!!
Writing file disk0:/asdm-645.bin...
16280544 bytes copied in 46.120 secs (353924 bytes/sec)

Tell the ASA which software you want to run

If the ASA and ASDM software that you just transferred to your ASA are the only copies in flash then the below steps aren’t completely necessary. Any time you have more than one copy in flash, however, it’s a good idea to explicitly specify which software you want the ASA to actually run.

If you don’t specify, it will use the first version that it finds in flash which may — or may NOT — be the one you want it to.

For good measure, let’s explicitly specify that we want to use the new versions that we just copied onto flash.

ciscoasa# configure terminal
ciscoasa(config)# boot system flash:/asa825-k8.bin
INFO: Converting flash:/asa825-k8.bin to disk0:/asa825-k8.bin
ciscoasa(config)# asdm image flash:/asdm-645.bin

Easy enough, right?

At this point, the only thing that remains to do is to save your changes and reload your ASA so that it will boot into the new version of the software (and make use of the new version of ASDM).

ciscoasa(config)# end
ciscoasa# write memory
Cryptochecksum: aaaa08ce ccde38f2 19c42e08 dea24cbd

2713 bytes copied in 1.450 secs (2713 bytes/sec)
ciscoasa# reload
Proceed with reload? [confirm]

Once the ASA comes back up, verify that it did, in fact, boot from the new software.

ciscoasa# show version | include image
System image file is "disk0:/asa825-k8.bin"
ciscoasa# show asdm image
Device Manager image file, disk0:/asdm-645.bin
LVL 57

Accepted Solution

Pete Long earned 1000 total points
ID: 39966610
The ASA was introduced with version 7? I'm assuming you mean ASDM version 6?

Update Cisco ASA - Directly from Cisco (via ASDM)
Cisco ASA5500 Update System and ASDM (From ASDM)
Cisco ASA5500 Update System and ASDM (From CLI)
WARNING: If you are upgrading form below version 8.3 to a version above 8.3 - check your firewall has enough RAM;
ASA - Memory Error (Post upgrade to version 8.3)

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.


Author Comment

ID: 39991461
thanks for all your comments . I wa able to upgrade it to ASDM 7.1 and code 9.0 . closing the question and splitting the points

Expert Comment

by:Adonis Sardinas
ID: 40016596
Here is a Matrix that shows you what version of the ASA software can be installed on the CISCO ASA 5505 unit

I myself had a CISCO ASA 5505 with 256 MB
Which can handle:
ASA 8.2(5)
ASDM 7.1(6).

After installing 1 GB DDR 400 Ram i updated the unit today to
ASA 9.1(5)

Runs perfect, I hope this answers your question.

Expert Comment

ID: 40375158
Dear all,
I have a question:

I've got ASA 5525X model(ASA-OS 9.1) and exciting model is 5505 with ASA OS version 7.1.
I need to migrate config from old ASA to new ASA 5525.
Since there are hundreds of access-list, NATtings, I find it too difficult to re-configure each and every NATting, access-list.
Can I downgrade from ASA OS in 5525X to ASA 7.1 OS so that I can just copy and paste all commands ?


Expert Comment

ID: 40375161
Or any easy way that I can convert exciting config from old ASA 7.1 to new ASA 5525 OS 9.1 ?
It is not that I'm lazy to reconfigure and it is just that I need to get this done asap in very shot time and exciting NATting, ACL is too many as there are so many Vlans, routings involve.


Expert Comment

ID: 40375165
One more question is if I configure new unit as Failover unit of exciting old ASA, will all configurations from old ASA be replicated automatically to the new unit with its new syntax, command parameters ?

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let’s face it: one of the reasons your organization chose a SaaS solution (whether Microsoft Dynamics 365, Netsuite or SAP) is that it is subscription-based. The upkeep is done. Or so you think.
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question