Introduction

This document describes how to upgrade a software image on the Cisco ASA 5500 Series Adaptive Security Appliances using the Cisco Adaptive Security Device Manager (ASDM).

The Cisco ASA 5505 is a full-featured firewall for small business, branch, and enterprise teleworker environments. It delivers high-performance firewall, SSL and IPsec VPN, and rich networking services in a modular, immediately operational appliance. Using the integrated graphical Cisco Adaptive Security Device Manager (ASDM), the Cisco ASA.

Cisco Adaptive Security Appliance Software for the ASA 5506-X, 5508-X, 5516-X, and ISA 3000. Login and Service Contract Required.
Well Cisco isn't going to release any new software for the ASA 5505. The small amount they are making from the few customers who continue to have hardware support doesn't justify the resources to maintain the code base for that older platform. This may make some customers unhappy, but that's the decision they've made.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on these software and hardware versions:

Cisco ASA 5500 and ASA5500-X 9.1(2) and later
Cisco ASDM 7.1 and later

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Related Products

This configuration can also be used with Cisco ASA 5500-X Series Security Appliance Software Version 9.x.

Conventions

Refer to the Cisco Technical Tips Conventions for more information on document conventions.

Download Software

You can download your required release version of ASA Software images and ASDM Software images using these links:

Cisco ASA Software Release Download (registered customers only)
Cisco ASDM Software Release Download (registered customers only)

Note: You need to have valid Cisco user credentials in order to download this software from Cisco.com.

Compatibility between ASA and ASDM

Refer the below link which is updated with the compatibility and cisco recommended ASDM release for each version of ASA.

ASA Upgrade Path

Refer the below link which provides the upgrade path for ASA. Some versions require an interim upgrade before you can upgrade to the latest version.

Upgrade a ASA Software Image using ASDM 7.x

Complete these steps to upgrade a software image on the ASA 5500 using ASDM.

1. If ASA is in Single context mode. Select Tools > Upgrade Software from Local Computer... from the Home window of the ASDM.

If ASA is running Multiple context mode, the Upgrade Software from Local Computer option under Tools is available only from System context.

2. Select ASA as the image type to upload from the drop-down menu.

3. Click Browse Local Files... or type the path in the Local File Path field to specify the location of the software image on your PC.
4. Click Browse Flash....
5. A Browse Flash Dialog window appears with the file name entered automatically. If the file name does not appear, enter it manually in the File Name field. Click OK when you are done.

6. Once both the local and remote file names are specified, click Upload Image.

7. A Status window appears while ASDM writes the image to Flash. Once completed, an Information window appears that indicates a successful upload and if the image should be set as boot image. Select Yes

Click OK in the Information window and then Close in the Upload Image from Local PC window.

8. Choose Tools > System Reload from the Home window to reload the device.

A new window appears that asks you to verify the details of the reload. Select Save the running configuration at the time of reload and then choose a time to reload.

Now—Reboot the device immediately.
Delay By—Specify in how many minutes or hours from now to reload the device.
Schedule at—Specify a time and date to reload the device.

You can also specify whether or not the device should force a reload immediately if a scheduled reload fails. Check On Reload failure, force an immediate reload after and then specify a maximum hold time. This is the amount of time that the security appliance waits to notify other subsystems before a shutdown or reboot. After this time elapses, a quick (forced) shutdown/reboot occurs. Click Schedule Reload.

Once the reload is in progress, a Reload Status window appears that indicates that a reload is being performed. An option to exit ASDM is also provided.
Note: Start ASDM again after the ASA reloads.

Upgrade ASDM Image using ASDM 7.x.

Complete these steps to upgrade a software image on the ASA 5500 using ASDM.

1. Select Tools > Upgrade Software from Local Computer... from the Home window of the ASDM.

Cisco Asa 5505 Firmware Download

2. Select ASDM as the image type to upload from the drop-down menu.

3. Click Browse Local Files... or type the path in the Local File Path field to specify the location of the software image on your PC.

Click Browse Flash....

A Browse Flash Dialog window appears with the file name entered automatically. If the file name does not appear, enter it manually in the File Name field. Click OK when you are done.

4. Click OK once the image is updated with the new image.

5. Select File > Save Running Configuration to Flash from the Home window of the ASDM.

Exit the ASDM and login back again to manage the ASA with the upgraded ASDM image.

Upgrading the ASA and ASDM by downloading image directly from CCO

Complete these steps to upgrade a ASA and ASDM image directly from CCO.
1. Select Tools > Check for ASA/ASDM Updates... from the Home window of the ASDM.

2. When the username and password prompt appears, provide the Cisco.com credentials and click Login.

3. The Cisco.com Upgrade Wiazard appears. In te Overview section, click Next.

4. In the Select Software section, check the software which needs to be upgraded. If both ASA and ASDM needs to be upgraded, check both options.

5. In the ASA version dropdown, select the version to which the ASA upgrade has to be performed.

6. In the ASDM version dropdown, select the version to which the ASDM upgrade has to be performed. Click Next once the appropriate versions are selected.

7. In the Review Changes section, Review the changes and Click Next .

8. The Installation of the images start and the overall progress can be seen as below. Once completed click Finish.
In the Results section, check the 'Save configuration and reload device now' option. Click Finish.

9. The Reload status screen appears while the device reloads.

10. Click 'Exit ASDM' and login back again once the device comes up after reload.

Upgrade a Software Image and ASDM Image using CLI

Cisco Asa 5505 Software Version Compatibility

A TFTP server is required to upgrade or downgrade a software image as well as an ASDM image for a ASA. Refer to TFTP Serv