ASA Upgrade - Different Ways to load files to Flash


Wed, 06/11/2014 - 10:08
Aug 18th, 2010

Table of Contents 


This document describes the different methods of uploading new IOS in ASA.
Scenario 1

Upgrading an ASA from FTP:

copy ftp://[username[:password]@]<SERVER>[/path]/filename {flash:/ | disk0:/ | disk1:/}[path/]filename


copy ftp://pshanubh:*********@ disk0:/asa803-19-k8.bin

Upgrading an ASA from HTTPS:

copy http[s]://[username[:password]@]<SERVER>[:port][/path]/filename {flash:/ | disk0:/ | disk1:/ }[path/]filename


copy http://pshanubh:********@ disk0:/asa803-19-k8.bin


Upgrading an ASA from SSh/SCP:


--> Enable SCP on the ASA
    To use the SCP method, you must first enable it on the firewall:
        hostname(config)# ssh scopy enable


--> Copying files to the ASA
    From a Unix/Linux host with OpenSSH or Tectia SSH installed:
    Enter the following command:
      scp –v <filename> username@asa_address
      scp –v asa803-19-k8.bin pshanubh@


Scenario 2:

User planning to migrate his ASA 5520 from 8.2 to 8.3 and we need help to finalize this issue because currently a lot of services running on firewall like:

  • SSL-VPN connections
  • Site-To-Site VPN connections
  • NATing,  Access-lists 
  • Internet service


There are literally dozens of documents on this site and Cisco's ASA Product Support page (plus many other sites) that address the upgrade procedure and considerations you should be aware of.

Please start with  the following:

jtmajorx5 Sat, 12/21/2013 - 16:19

So, this is what I got

FW# show run ssh

ssh scopy enable


When I try to copy with PSCP I get the following:

D:\Users\jmajor\Documents>pscp.exe -2 -scp -pw ***** anyconnect-win-3.0.10057

-k9.pkg username@x.x.x.x:anyconnect-win-3.0.10057-k9.pkg

Fatal: Received unexpected end-of-file from server


This Document

Related Content