I have several 5516 and 5506 ASAs to replace. Replacing with "one to one".Someone told me that Firepower software portion sticks to hardware, so if I swap SSD from an old ASA to a new one, SFR module won't boot up. I tested that myself between two new ASAs swapping SSDs, SFR booted just fine. I wounder if there are any issues and it's allowed to swap the SSD during replacement.
It depends on its current state and the version of software that's installed.
When the ASA finishes booting and initializing the module, run "show module sfr detail" to see the current status.
You don't normally have to partition the SSD but you do need to ensure it has the proper version of software for compatibility with your FMC (the module can't be at a higher level than FMC) and general operational considerations (i.e. you should run the latest versions in most cases).
Thanks for the quick response! I am replacing a ASA5516-FPWR-K9 with another ASA5516-FPWR-K9. I plan on a FMC backup and copying the image, configuration from the ASA to a USB. Can the SSD just be moved to the new device?
I am surprised that the Cisco does not supply a set of instruction for a RMA replacement...
This document describes how to generate an FXOS troubleshoot file for 2100/4100/9300-series devices
The information in this document is based on these software and hardware versions:
Cisco Firepower 9300 Security Appliance r...
FP URL filtering capability can classify the URLs based on:
Reputation (risk level)
This varies from High Risk (level 1) to Well Known (level 5)
Category + Reputation
If you select a reputation level to allow,...
Cisco Press has published a step-by-step visual guide to configuring and troubleshooting of the Cisco Firepower Threat Defense (FTD). Each consistently organized chapter on this book contains definitions of keywords, operational flowcharts, architectural ...