Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

ASA Upgrade - Different Ways to load files to Flash



This document describes the different methods of uploading new IOS in ASA.
Scenario 1

Upgrading an ASA from FTP:

copy ftp://[username[:password]@]<SERVER>[/path]/filename {flash:/ | disk0:/ | disk1:/}[path/]filename


copy ftp://pshanubh:*********@ disk0:/asa803-19-k8.bin

Upgrading an ASA from HTTPS:

copy http[s]://[username[:password]@]<SERVER>[:port][/path]/filename {flash:/ | disk0:/ | disk1:/ }[path/]filename


copy http://pshanubh:********@ disk0:/asa803-19-k8.bin


Upgrading an ASA from SSh/SCP:


--> Enable SCP on the ASA
    To use the SCP method, you must first enable it on the firewall:
        hostname(config)# ssh scopy enable


--> Copying files to the ASA
    From a Unix/Linux host with OpenSSH or Tectia SSH installed:
    Enter the following command:
      scp –v <filename> username@asa_address
      scp –v asa803-19-k8.bin pshanubh@


Scenario 2:

User planning to migrate his ASA 5520 from 8.2 to 8.3 and we need help to finalize this issue because currently a lot of services running on firewall like:

  • SSL-VPN connections
  • Site-To-Site VPN connections
  • NATing,  Access-lists 
  • Internet service


There are literally dozens of documents on this site and Cisco's ASA Product Support page (plus many other sites) that address the upgrade procedure and considerations you should be aware of.

Please start with  the following:

Version history
Revision #:
2 of 2
Last update:
‎08-29-2017 12:27 AM
Updated by:
Labels (1)
Everyone's tags (2)
New Member


New Member

New Member

So, this is what I got

FW# show run ssh

ssh scopy enable


When I try to copy with PSCP I get the following:

D:\Users\jmajor\Documents>pscp.exe -2 -scp -pw ***** anyconnect-win-3.0.10057

-k9.pkg username@x.x.x.x:anyconnect-win-3.0.10057-k9.pkg

Fatal: Received unexpected end-of-file from server