ASA Upgrade - Different Ways to load files to Flash


Wed, 06/11/2014 - 10:08
Aug 18th, 2010
User Badges:
  • Bronze, 100 points or more

Table of Contents 


This document describes the different methods of uploading new IOS in ASA.
Scenario 1

Upgrading an ASA from FTP:

copy ftp://[username[:password]@]<SERVER>[/path]/filename {flash:/ | disk0:/ | disk1:/}[path/]filename


copy ftp://pshanubh:[email protected]/asa803-19-k8.bin disk0:/asa803-19-k8.bin

Upgrading an ASA from HTTPS:

copy http[s]://[username[:password]@]<SERVER>[:port][/path]/filename {flash:/ | disk0:/ | disk1:/ }[path/]filename


copy http://pshanubh:[email protected]:80/asa803-19-k8.bin disk0:/asa803-19-k8.bin


Upgrading an ASA from SSh/SCP:


--> Enable SCP on the ASA
    To use the SCP method, you must first enable it on the firewall:
        hostname(config)# ssh scopy enable


--> Copying files to the ASA
    From a Unix/Linux host with OpenSSH or Tectia SSH installed:
    Enter the following command:
      scp –v <filename> [email protected]_address
      scp –v asa803-19-k8.bin [email protected]


Scenario 2:

User planning to migrate his ASA 5520 from 8.2 to 8.3 and we need help to finalize this issue because currently a lot of services running on firewall like:

  • SSL-VPN connections
  • Site-To-Site VPN connections
  • NATing,  Access-lists 
  • Internet service


There are literally dozens of documents on this site and Cisco's ASA Product Support page (plus many other sites) that address the upgrade procedure and considerations you should be aware of.

Please start with  the following:

Jonathan Major Sat, 12/21/2013 - 16:19
User Badges:

So, this is what I got

FW# show run ssh

ssh scopy enable


When I try to copy with PSCP I get the following:

D:\Users\jmajor\Documents>pscp.exe -2 -scp -pw ***** anyconnect-win-3.0.10057

-k9.pkg [email protected]:anyconnect-win-3.0.10057-k9.pkg

Fatal: Received unexpected end-of-file from server


This Document