Solved

ASA 5505 disk0 clean up

Posted on 2014-09-16
2
432 Views
Last Modified: 2014-09-16
Need to clear off some files from my ASA 5505. I'm not sure which I can safely remove.  The first 2 are running asdm and asa so I know those need to stay.  We're using Anyconnect.  the files listed take a lot of space.  But do I need all of them?

  125  22824520    Mar 18 2014 09:49:06  asdm-715-100.bin
  123  27611136    Apr 24 2013 11:13:08  asa902-k8.bin
   22  4096        Oct 06 2011 14:56:24  crypto_archive
  148  393828      Feb 06 2010 15:10:20  crypto_archive/crypto_arch_1.bin
  149  393828      Oct 06 2011 14:56:24  crypto_archive/crypto_arch_2.bin
   10  4096        Jan 28 2010 11:37:18  log
   23  4096        Jan 28 2010 11:37:40  coredumpinfo
   24  59          Apr 24 2013 11:24:20  coredumpinfo/coredump.cfg
  126  8282        Apr 24 2013 11:24:06  8_2_2_0_startup_cfg.sav
  127  1190        Apr 24 2013 11:24:20  upgrade_startup_errors_201304241624.log
 121  244624      Apr 24 2013 10:36:32  anyconnect-EnableFIPS-win-3.1.03103.exe
  122  14336       Apr 24 2013 10:37:52  anyconnect-EnableFIPS-win-3.1.03103.mst
  128  3203909     Feb 03 2010 16:11:16  anyconnect-win-2.4.1012-k9.pkg
  132  31522773    Aug 22 2013 11:42:02  anyconnect-win-3.1.03103-k9.pkg
  133  4929918     Aug 22 2013 11:42:06  anyconnect-win-2.5.6005-k9.pkg
  129  4907314     Feb 03 2010 14:14:02  anyconnect-macosx-powerpc-2.4.1012-k9.pkg
  130  4832344     Feb 03 2010 14:14:28  anyconnect-macosx-i386-2.4.1012-k9.pkg
  131  11293375    Aug 22 2013 11:41:50  anyconnect-macosx-i386-3.1.03103-k9.pkg
  134  2009        Aug 22 2013 11:42:06  anyconnect_clients.xml
  135  10997       Jun 26 2013 14:58:52  oldconfig_2013Jun26_2005.cfg
  136  11844       Mar 18 2014 12:35:32  oldconfig_2014Mar18_1825.cfg
  143  13253       Sep 15 2014 15:16:16  oldconfig_2014Sep15_2016.cfg
  145  13253       Sep 15 2014 15:30:35  oldconfig_2014Sep15_2030.cfg
  137  11504       Aug 22 2013 11:42:18  startup-config.cfg
0
Comment
Question by:ShawnGray
2 Comments
 
LVL 6

Accepted Solution

by:
Matt earned 500 total points
ID: 40325604
For AnyConnect you need only .PKG files that will be installed on the clients when they first log on to ASA using SSL VPN. You should have only ONE version of PKG files (they are in fact ZIP files). Which version of .PKG package is currently configured for the clients? WEBVPN section... Please post config.

If you are using version 3.1.03103 (a little bit old), then you can safely remove these files:

121  244624      Apr 24 2013 10:36:32  anyconnect-EnableFIPS-win-3.1.03103.exe
122  14336       Apr 24 2013 10:37:52  anyconnect-EnableFIPS-win-3.1.03103.mst
128  3203909     Feb 03 2010 16:11:16  anyconnect-win-2.4.1012-k9.pkg
133  4929918     Aug 22 2013 11:42:06  anyconnect-win-2.5.6005-k9.pkg
129  4907314     Feb 03 2010 14:14:02  anyconnect-macosx-powerpc-2.4.1012-k9.pkg
130  4832344     Feb 03 2010 14:14:28  anyconnect-macosx-i386-2.4.1012-k9.pkg


These files MUST Stay otherwise NEW clients will not get AnyConnect automatically installed, old clients will work without problem:
132  31522773    Aug 22 2013 11:42:02  anyconnect-win-3.1.03103-k9.pkg
131  11293375    Aug 22 2013 11:41:50  anyconnect-macosx-i386-3.1.03103-k9.pkg


These two files will provide automatic installation for Windows and Mac OSX i386 clients.

Old config files can be saved on your PC using TFTP but they don't take too much space. To be on the safe side, backup running config every time you make a change in configuration.

Other files:

126  8282        Apr 24 2013 11:24:06  8_2_2_0_startup_cfg.sav
127  1190        Apr 24 2013 11:24:20  upgrade_startup_errors_201304241624.log

These are files when you upgraded SW version on ASA box. You can archive them on your PC. They don't have any influence on current config.
0
 

Author Closing Comment

by:ShawnGray
ID: 40326288
Excellent. Thank you Matt.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now