Solved

ASA 5505 disk0 clean up

Posted on 2014-09-16
2
486 Views
Last Modified: 2014-09-16
Need to clear off some files from my ASA 5505. I'm not sure which I can safely remove.  The first 2 are running asdm and asa so I know those need to stay.  We're using Anyconnect.  the files listed take a lot of space.  But do I need all of them?

  125  22824520    Mar 18 2014 09:49:06  asdm-715-100.bin
  123  27611136    Apr 24 2013 11:13:08  asa902-k8.bin
   22  4096        Oct 06 2011 14:56:24  crypto_archive
  148  393828      Feb 06 2010 15:10:20  crypto_archive/crypto_arch_1.bin
  149  393828      Oct 06 2011 14:56:24  crypto_archive/crypto_arch_2.bin
   10  4096        Jan 28 2010 11:37:18  log
   23  4096        Jan 28 2010 11:37:40  coredumpinfo
   24  59          Apr 24 2013 11:24:20  coredumpinfo/coredump.cfg
  126  8282        Apr 24 2013 11:24:06  8_2_2_0_startup_cfg.sav
  127  1190        Apr 24 2013 11:24:20  upgrade_startup_errors_201304241624.log
 121  244624      Apr 24 2013 10:36:32  anyconnect-EnableFIPS-win-3.1.03103.exe
  122  14336       Apr 24 2013 10:37:52  anyconnect-EnableFIPS-win-3.1.03103.mst
  128  3203909     Feb 03 2010 16:11:16  anyconnect-win-2.4.1012-k9.pkg
  132  31522773    Aug 22 2013 11:42:02  anyconnect-win-3.1.03103-k9.pkg
  133  4929918     Aug 22 2013 11:42:06  anyconnect-win-2.5.6005-k9.pkg
  129  4907314     Feb 03 2010 14:14:02  anyconnect-macosx-powerpc-2.4.1012-k9.pkg
  130  4832344     Feb 03 2010 14:14:28  anyconnect-macosx-i386-2.4.1012-k9.pkg
  131  11293375    Aug 22 2013 11:41:50  anyconnect-macosx-i386-3.1.03103-k9.pkg
  134  2009        Aug 22 2013 11:42:06  anyconnect_clients.xml
  135  10997       Jun 26 2013 14:58:52  oldconfig_2013Jun26_2005.cfg
  136  11844       Mar 18 2014 12:35:32  oldconfig_2014Mar18_1825.cfg
  143  13253       Sep 15 2014 15:16:16  oldconfig_2014Sep15_2016.cfg
  145  13253       Sep 15 2014 15:30:35  oldconfig_2014Sep15_2030.cfg
  137  11504       Aug 22 2013 11:42:18  startup-config.cfg
0
Comment
Question by:ShawnGray
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
Matt earned 500 total points
ID: 40325604
For AnyConnect you need only .PKG files that will be installed on the clients when they first log on to ASA using SSL VPN. You should have only ONE version of PKG files (they are in fact ZIP files). Which version of .PKG package is currently configured for the clients? WEBVPN section... Please post config.

If you are using version 3.1.03103 (a little bit old), then you can safely remove these files:

121  244624      Apr 24 2013 10:36:32  anyconnect-EnableFIPS-win-3.1.03103.exe
122  14336       Apr 24 2013 10:37:52  anyconnect-EnableFIPS-win-3.1.03103.mst
128  3203909     Feb 03 2010 16:11:16  anyconnect-win-2.4.1012-k9.pkg
133  4929918     Aug 22 2013 11:42:06  anyconnect-win-2.5.6005-k9.pkg
129  4907314     Feb 03 2010 14:14:02  anyconnect-macosx-powerpc-2.4.1012-k9.pkg
130  4832344     Feb 03 2010 14:14:28  anyconnect-macosx-i386-2.4.1012-k9.pkg


These files MUST Stay otherwise NEW clients will not get AnyConnect automatically installed, old clients will work without problem:
132  31522773    Aug 22 2013 11:42:02  anyconnect-win-3.1.03103-k9.pkg
131  11293375    Aug 22 2013 11:41:50  anyconnect-macosx-i386-3.1.03103-k9.pkg


These two files will provide automatic installation for Windows and Mac OSX i386 clients.

Old config files can be saved on your PC using TFTP but they don't take too much space. To be on the safe side, backup running config every time you make a change in configuration.

Other files:

126  8282        Apr 24 2013 11:24:06  8_2_2_0_startup_cfg.sav
127  1190        Apr 24 2013 11:24:20  upgrade_startup_errors_201304241624.log

These are files when you upgraded SW version on ASA box. You can archive them on your PC. They don't have any influence on current config.
0
 

Author Closing Comment

by:ShawnGray
ID: 40326288
Excellent. Thank you Matt.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Telepresence on backup 3 81
Sonicwall Firewall -- automatic nightly 2am speed tests ? 1 99
Sonicwall routing between VPNs 5 71
Home firewall recommendations 11 107
In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question