Adding SSD to ASA 5555X or 5525X - general questions

I am prep'ing two HA pairs of ASAs for FirePOWER. I have (hot) installed the SSDs (two in 5555X and one in 5525X) and did not see the SSDs in SHOW INVENTORY. Upon reading the instructions in the ASA hardware guide, it says that you must reload the ASA to recognize the SSD. I reloaded the non-active 5525X and the SSD still did not show up in SHOW INVENTORY.
Questions:
1) when you install the SSD, is the old non-SSD drive still active? (Yes, because the non-active ASA reloaded with no problem, but please verify)
The instructions say to "image" the SSD. My thought was that the FirePOWER image would be the only image I would put on the SSD and I would continue to use the non-SSD for other files like the ASA and ASDM images.
2) Can you use both the non-SSD and SSD drives in a single ASA?
3) Do I need to move the files from the non-SSD to the SSD? From the instructions, it seems both are referred to as DISK0: so I'm not sure how to reference both drives individually. How would I load the FirePOWER image onto the SSD if both non-SSD and SSD are referenced as Disk0:?
The SSDs lights are illuminated after the drives were installed.
Thanks.

I do believe ASA 9.1(1) is required as a minimum. See the matrix in Table 3 in the ASA compatibility matrix.
Also the release notes for ASA 9.1 note under "New Features in ASA 9.1(1)" that they introduced support for the SSD-based CX SSP. 
You have to move up to at least 9.2(2.4) for for FirePOWER Service module.

Similar Messages

  • Upgrade from FWSM to ASA 5555Xs

    Hello,
    We would like to decommision our FWSMs and upgrade to the ASA 5555Xs. This leads me to ask the following: What would be the most efficient way of doing this without any interruption to production? Has anyone successfully acomplished this? If you have please share your experiences and caveats involved in this project.
    Thanks!

    There will be some downtime.
    1. You can configure the 5555s ahead of time off line as a failover pair with the same config as in the FWSM pair.
    2. On the day of cut over. Power down the FWSMs and plug the ASAs into the network.
    3. If the config is the same and same IP address is used on the ASAs then, clear the ARP cache on all adjacent L3 devices.
    4. Test connectivity.
    There will be slight downtime which cannot be avoided. This cannot be hitless when are you are switching platforms.
    -Kureli
    Checkout my breakout session at Cisco Live 2013, Orlando, Florida.
    BRKSEC-2024 Deploying Next-Generation Firewall Services on the ASA 
    Room 314A Tuesday, June 25 3:00 PM - 4:30 PM

  • ASA 5555x default TCP normalizer settings

    Greetings,  I am trying to find what is the default actions of the TCP normalizer in the ASA 5555x (9.1(3)).  I can see in packet captures that the ASA is stripping some option flags (SACK) and I am also wondering if it is dropping none conforming packets etc etc.  So far my research has shown that only specific traffic from specific systems is being stripped, in my case storage replication traffic.  Thanks for any details, I am also going to open a TAC case and I will update this thread. Cheers!

    You find much on the defaults in the config-gude:
    http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/conns_connlimits.html#pgfId-1090664
    http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/conns_connlimits.html#53790

  • Pain-free way of adding SSD?

    Good day,
    I run SJS DS 5.2 patch 4 on a Solaris x86 system. When this directory was first set up using idsconfig, no service search descriptors were added for the passwd service and rightfully enough, searches logged in the access log only refer to ou=people,o=mydomain.com,dc=mydomain,dc=com.
    I've read of re-running idsconfig to add SSD's but that looks woefully mis-scoped; I'd like something more specific to be able to force searches for the passwd service to search another ou in the same o container.
    I read about the serviceSearchDescriptor of the "default" profile and decided to set up the following on my test system:
    Attribute: serviceSearchDescriptor
    Value: passwd:ou=people,o=mydomain.com,dc=mydomain,dc=com;ou=otherPeople,o=mydomain.com,dc=mydomain,dc=com
    Not only was I unable to log in using accounts from the otherPeople container, I also then lost the ability to log in using accounts from the people container.
    I've scrapped this test system and am now rebuilding it but I'd like to know whether a pain-free way of adding SSDs exists. That excludes re-configuring using idsconfig.
    Cheers

    Ah well, no luck yet.
    I'm running telnet 127.0.0.1 on the test machine using a test account edepa2 created under the additional container morepeople.
    The DS access log on the test machine (pasted at the end of this post) shows that the morepeople container is beng searched and the entry edepa2 is being found but the telnet returns "login incorrect".
    The serviceSearchDescriptor attribute is now set to:
    passwd:ou=people,o=mydomain.com,dc=mydomain,dc=com;ou=morepeople,o=mydomain.com,dc=mydomain,dc=com
    Any ideas?
    Cheers,
    Etienne
    [29/Jun/2007:14:28:55 +0200] conn=60 op=-1 msgId=-1 - closed.
    [29/Jun/2007:14:29:12 +0200] conn=61 op=-1 msgId=-1 - fd=40 slot=40 LDAP connection from 193.188.36.249 to 193.188.36.249
    [29/Jun/2007:14:29:12 +0200] conn=61 op=0 msgId=1 - BIND dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com" method=128 version=3
    [29/Jun/2007:14:29:12 +0200] conn=61 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com"
    [29/Jun/2007:14:29:12 +0200] conn=61 op=1 msgId=2 - SRCH base="ou=people,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=shadowAccount)(uid=edepa2))" attrs="uid userPassword shadowFlag"
    [29/Jun/2007:14:29:12 +0200] conn=61 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
    [29/Jun/2007:14:29:12 +0200] conn=61 op=2 msgId=3 - SRCH base="ou=morepeople,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=shadowAccount)(uid=edepa2))" attrs="uid userPassword shadowFlag"
    [29/Jun/2007:14:29:12 +0200] conn=61 op=2 msgId=3 - RESULT err=0 tag=101 nentries=1 etime=0
    [29/Jun/2007:14:29:12 +0200] conn=61 op=3 msgId=4 - UNBIND
    [29/Jun/2007:14:29:12 +0200] conn=61 op=3 msgId=-1 - closing - U1
    [29/Jun/2007:14:29:13 +0200] conn=61 op=-1 msgId=-1 - closed.
    [29/Jun/2007:14:29:15 +0200] conn=26 op=12 msgId=13 - SRCH base="ou=people,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=posixAccount)(uid=edepa2))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell"
    [29/Jun/2007:14:29:15 +0200] conn=26 op=12 msgId=13 - RESULT err=0 tag=101 nentries=0 etime=0
    [29/Jun/2007:14:29:15 +0200] conn=62 op=-1 msgId=-1 - fd=40 slot=40 LDAP connection from 193.188.36.249 to 193.188.36.249
    [29/Jun/2007:14:29:15 +0200] conn=62 op=0 msgId=1 - BIND dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com" method=128 version=3
    [29/Jun/2007:14:29:15 +0200] conn=62 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com"
    [29/Jun/2007:14:29:15 +0200] conn=62 op=1 msgId=2 - SRCH base="ou=people,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=posixAccount)(uid=edepa2))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell"
    [29/Jun/2007:14:29:15 +0200] conn=62 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
    [29/Jun/2007:14:29:15 +0200] conn=62 op=2 msgId=3 - SRCH base="ou=morepeople,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=posixAccount)(uid=edepa2))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell"
    [29/Jun/2007:14:29:15 +0200] conn=62 op=2 msgId=3 - RESULT err=0 tag=101 nentries=1 etime=0
    [29/Jun/2007:14:29:15 +0200] conn=63 op=-1 msgId=-1 - fd=44 slot=44 LDAP connection from 193.188.36.249 to 193.188.36.249
    [29/Jun/2007:14:29:15 +0200] conn=63 op=0 msgId=1 - BIND dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com" method=128 version=3
    [29/Jun/2007:14:29:15 +0200] conn=63 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=proxyagent,ou=profile,o=mydomain.com,dc=mydomain,dc=com"
    [29/Jun/2007:14:29:15 +0200] conn=62 op=3 msgId=4 - UNBIND
    [29/Jun/2007:14:29:15 +0200] conn=62 op=3 msgId=-1 - closing - U1
    [29/Jun/2007:14:29:15 +0200] conn=62 op=-1 msgId=-1 - closed.
    [29/Jun/2007:14:29:15 +0200] conn=63 op=1 msgId=2 - SRCH base="ou=people,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=shadowAccount)(uid=edepa2))" attrs="uid userPassword shadowFlag"
    [29/Jun/2007:14:29:15 +0200] conn=63 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
    [29/Jun/2007:14:29:15 +0200] conn=63 op=2 msgId=3 - SRCH base="ou=morepeople,o=mydomain.com,dc=mydomain,dc=com" scope=2 filter="(&(objectClass=shadowAccount)(uid=edepa2))" attrs="uid userPassword shadowFlag"
    [29/Jun/2007:14:29:15 +0200] conn=63 op=2 msgId=3 - RESULT err=0 tag=101 nentries=1 etime=0
    [29/Jun/2007:14:29:15 +0200] conn=63 op=3 msgId=4 - UNBIND
    [29/Jun/2007:14:29:15 +0200] conn=63 op=3 msgId=-1 - closing - U1
    [29/Jun/2007:14:29:16 +0200] conn=63 op=-1 msgId=-1 - closed.
    [29/Jun/2007:14:29:31 +0200] conn=64 op=-1 msgId=-1 - fd=40 slot=40 LDAP connection from 193.188.36.249 to 193.188.36.249
    [29/Jun/2007:14:29:31 +0200] conn=64 op=0 msgId=1 - SRCH base="" scope=0 filter="(objectClass=*)" attrs="supportedControl supportedSASLMechanisms"
    [29/Jun/2007:14:29:31 +0200] conn=64 op=0 msgId=1 - RESULT err=0 tag=101 nentries=1 etime=0
    [29/Jun/2007:14:29:31 +0200] conn=64 op=1 msgId=2 - UNBIND
    [29/Jun/2007:14:29:31 +0200] conn=64 op=1 msgId=-1 - closing - U1
    [29/Jun/2007:14:29:32 +0200] conn=64 op=-1 msgId=-1 - closed.

  • General Question re logical workflow (Multiple Products/Sales Teams)

    Currently we are upgrading from a highly customized CRM environment developed in CRM 4.0.  We are hoping to move to an out of the box solution with 2015.
    But I have a general question. We are a service company with different sales groups for each of our products.
    Currently we have customization for each service so a Sales person is assigned to a specific product for the customer.
    So my question is, how is this handled out of the box.  I am sure there are many many many companies in the same situation.
    So say 10 products with sales group for each product.
    Then a customer with multiple departments.  Each sales group needs to contact the specific department.
    So a customer could potentially have 10 different sales people contacting different people in the customers organization.
    How do you know when someone has already made contact?
    If we just look at the activities it is not very clear that contact has been made for a specific product. 
    Even with our customizations, there have been many situations where 2 sales people contact the same person at a clients office and we end up looking very unorganized.
    Any thoughts or comments are appreciated.
    If this is not the right place to post this type if discussion, please redirect me.
    Thanks

    As an example, for 37-minute sequence of footage (made up of multiple clips) it's taking 50 minutes to first export a non-self-contained, time-code-reader-filter-added Quicktime.
    Did you render fully before you exported? That helps. But this is also a GOP format, and it takes longer to do pretty much everything, as it is a processor intensive format.
    1) How much more memory would help this work flow go faster, and approx. how much faster??
    None. RAM doesn't come into play here. PROCESSOR speed is all that matters. What will make it go faster is enabling QMaster to have Compressor access all cores of the processor. Or getting hardware to help with the compression, like the Compress HD from Matrox. But that only boosts encoding to H.264.
    2) Has anyone else done this type of work-flow, and been able to do it more quickly? Is RAM the issue? Any suggestions for a more efficient work-flow?
    RAM isn't the issue. Faster Processors, hardware boosting...converting the footage to ProRes before you begin editing...all help.
    RAM isn't what is hindering you here.
    Shane

  • General question on SQL Server 2000 to Oracle 10g

    Hello all,
    I just have a general question on migration from SQL Server 2000 to Oracle 10g using SQL Developer.
    How does it migrate Users with proper privileges from SQL Server to Oracle? Follow the interface steps? Or should the users be created on destination Oracle side?
    Thank you.

    Hi,
    It depends which type of migration you are making.
    For a 'Standard' migration when you migrate data a 'create user' statement is created as part of the migration and you will see this in the generated code.
    If you are using the 'Quick' migration option then you need to create the Oracle user or use an existing user to receive the data.
    Your best option is to review the documentation available from -
    http://www.oracle.com/technology/tech/migration//workbench/index_sqldev_omwb.html
    or directly from -
    http://download.oracle.com/docs/cd/E12151_01/index.htm
    and then get back with specific questions if this does not give you the information you need.
    Review the chapter -
    2. Migrating Third-Party Databases
    in -
    Oracle® Database SQL Developer User’s Guide Release 1.5
    Regards,
    Mike

  • Report Builder Question - OA AR Aging - and a general question

    I'm sure this is the wrong forum for this question, but I thought there might be someone here who might be using Oracle Applications and Report Builder who'd be kind enough to help me out.
    We've recently implemented Oracle Applications 11.5.10 and I have to use report builder to change the Accounts Receiveable Aging (7 bucket) to a 5 bucket report. I've already made some changes to the seeded "ARXAGMW.rdf" report, but I'm not a big Oracle Reports guy. I've stumbled through making some changes in various other reports. But this one is just plain nasty! :)
    I was thinking that I could simply add buckets 6 & 7 to bucket 5, then just hide or delete the 6 & 7 buckets. But I'm not sure where to even start. Any help with this would GUARANTEE a Christmas or other holiday card this year! :)
    I really want to keep this simple as possible, so any help would be very....helpful. :)
    Oh, my general question is: Are there any resouces/books for Oracle Reports (Report Builder)? I feel so lost trying to modify existing reports, let alone creating new ones.
    Thanks again!
    Steve

    Hi Steve,
    I am working on the 7-bucket aging report and i want to add a new field in data model.
    As the query is build dynamically, i have modified the function BUILD_CUSTOMER_SELECT to meet my requirements.
    But the problem is that in the data model, the field is not present in my Grouping. and if I try to add the field in the Data Model query (Q_ Customer) section,
    i get the following error: ORA-01789: query block has incorrect number of result columns.
    The query is as shown below:
    select rpad('a',50,'-') short_cust_name,
    0 cust_id,
    rpad('a',30,'-') cust_no,
    rpad('a',500,'-') sort_field1,
    rpad('a',40,'-') sort_field2,
    0 payment_sched_id,
    rpad('a',32,'-') class,
    sysdate due_date,
    0 amt_due_remaining,
    0 days_past_due ,
    0 amount_adjusted,
    0 amount_applied,
    0 amount_credited,
    sysdate gl_date,
    'x' data_converted,
    0 ps_exchange_rate,
    0 b0,
    0 b1,
    0 b2,
    0 b3,
    0 b4,
    0 b5,
    0 b6,
    rpad('a',25,'-') bal_segment_value,
    rpad('a',500,'-') inv_tid,
    rpad('a',32,'-') invoice_type
    , 'y' parent_cust --I WANT A NEW FIELD HERE TO BE VIEWED ON THE REPORT LAYOUT LATER
    from dual
    where 1=2
    UNION ALL
    &common_query_cus
    Did i missed somthing 4 me to be able to add the field here?

  • General question about iTunes Match and multiple libraries

    Hello to everyone,
    I have a general question about the iTunes Match service, which is available since yesterday in my country (Italy). Currently my library situation is the following:
    Computer A (desktop, Windows 7): "big" iTunes library (about 20 GB), at the moment not associated with my Apple ID
    Computer B (MacBook Air 2011): "small" iTunes library (about 5 GB), associated with my Apple ID
    At the moment, both my iOS devices (iPhone 4 and iPad 2) are synchronized with the smaller library on the MacBook Air.
    Question is as follows: should I subscribe to iTunes Match, would it be possible to upload the "big" library (provided I associate it with my Apple ID) to iCloud while keeping my devices synchronized with the "small" one?
    Ideally, at the end of the day, the situation should be the following: both iOS devices with music from the small library + possibility of downloading songs from iCloud (coming from the big one). Is this possible?
    Maybe the question sounds stupid, but I want to be sure about this before paying for the service.
    Thanks a lot.

    Yes, you could also associate your larger library with iTunes match if you associated your Apple ID with it. However any purchases in the library made from another Apple ID will not be matched with iTunes much.
    If both libraries are part of iTunes match, then all your devices will see all of the content from both libraries, which content you choose to have on those devices and which you have accessible via iTunes match is entirely up to you.

  • General Question on Proxies

    Hi,
    I have few general questions....
    How to decide which proxy to be used: Java or ABAP?
    What are the deciding factors?
    Which one is better when it comes to performance?
    Regards,
    Rajani Kumar

    bump

  • Where to direct a general questions about foreign films subtitles?

    I recently purchased a foreign film "Break Ke Badd" from the iTunes store. Although, it didn't specify that it had English subtitles, I assumed it did. After the full download, I tried to watch it and there weren't any English subs. I contacted iTunes and they more than happy to refund the money back to my account. Now after a few weeks, the iTunes store DOES list Eng subs for this film. I don't want to purchase it again and have to contact iTunes for another refund...Therefore my question is, is there a general question contact one could use to find an answer to my question. Basically, to verify that this movie, indeed has English subs before I re-purchase. 
    Any info is appreciated!

    Yes I know as the [https://support.mozilla.org/en-US/questions/ Questions] section is more for desktop Firefox support and the place I linked to is for "Firefox OS" support in English where some who are involved with it do post in it occasionally.
    I would have moved that [https://support.mozilla.org/en-US/questions/962783 thread] to the "Firefox OS" English section, however I cannot as the [https://support.mozilla.org//questions/ Questions] and [https://support.mozilla.org/forums Contributor Forums] are not the same.

  • Camileo charging problem (solved) and a general question!

    Hi all!
    First of all, I was going to ask for help as to why the Camileo S10 was not charging (the orange light wasn't flashing), and I'd seen a few people with similar problems.
    The solution?
    Give the contacts on the battery a clean.
    The insulation sticker that comes on it must leave some kind of residue on it, and it's enough to prevent charging. Now it's flashing away happily :]
    So my general question was, is it possible/advisable to use the camera on the mains?
    Rather than constantly draining and charging the battery during long shoots, I'd prefer to just leave it plugged in!
    Thanks very much in advance!
    Paul

    Hi
    I think the battery handling is always the same no matter what product it is
    From time to time the battery should be recalibrated.
    This means that the battery should be discharged fully and after then you should charge it again until the battery would reach 100%
    I do this with all my batteries; mobile phone battery, digi cam battery and notebook battery.

  • Update on Bioinformatics WIKI, scripting challenges, and a general question

    I am waiting for my site to go on-line at Oak Ridge National Labs (USA, Tennessee).  Should be another week or so, maybe less.
    When that happens, you will see a veritable explosion of scripting challenges in my wiki (Emerging Technologies->Bioinformatics.)
    One general question in preparation for these challenges.
    There are a number of standard  bioinformatic programs that can be run interactively via the web at various sites, e.g. "BLAST" and "STRIDE". 
    Although these can also be run locally, this requires that you download large databases and keep them updated.
    So here's my question to the scripting experts:
    Are scripting languages powerful enough to submit queries to web pages and then use regex's to parse the html that is returned?
    Bill Mann has used PERL to do some of the required regex parsing, but there is a lot left to do, and, his stuff only works when a perl program is invoking a bioinformatic program locally, not interactively.
    If so, we all can do some beautiful stuff together , if anyone is interested ...

    ...my wiki on...
    There is by it's very nature no such thing as MY WIKI, except you run your own wiki project in an exclusive mode. Which were...well ... unusual.
    Are scripting languages powerful enough to submit queries to web pages and then use regex's to parse the html that is returned?
    Yes.
    anton

  • Delete scriptcode - General question: capacity limit of Acrobat Windows

    Hello everybody,
    I've got a general question to the capacity limit of Acrobat Windows.
    I often make forms with
    for instance the current one has 18 pages. Eleven pages have fields on it. (But some pages have only one field on it) The fields of one page to another are sometimes linked with script code. The file needs nearly 1 MB.
    Usual I write the script code by a double-click on the field/ calculate/ custom calculation script. (Is this the right way?) Today it happens again that a field with script code lost the script code.
    That's why I wonder whether there is a capacity limit of Acrobat Windows or whether I make mistakes. (This is only one instance of several where the form has his own life.)
    Thanks in advance for helping me!

    http://forums.adobe.com/community/acrobat/acrobat_scripting

  • SAP GRC Process Control - General Questions

    Hi all,
    We have the following general questions regarding SAP GRC Process Control:
    1) Assume that we have set up 5 different SAP Connectors in Process Control. When you configured a specific rule and control and then, schedule the job for such control, how does the system (SAP Process Control) knows which back-end system needs to be accesed for such control?
    2) In which language are the out-of-the box rule steps's script coded? In which different languages can those scripts be coded, what is to say, in which language can we code our own scripts?
    3) How is the detailed flow between SAP Process Control and SAP Back-end system?
    Many thanks. Regards,
        Imanol

    null

  • Newbie question - general question about e-mail sync

    Hi,
    I have a general question about email sync and BlackBerry smartphones.  Are there any devices that allow email syncing with a Microsoft Exchange 2007 system that do not require the BlackBerry Enterprise server?
    Thanks; sorry if this has been asked before but I was unable to find it in the forums, documentation, etc.  Everything I found assumes that for this kind of environment you will be using a BlackBerry Enterprise solution, but I can't assume.
    Thanks again.
    Solved!
    Go to Solution.

    Hi and Welcome to the Forums!
    If the Exchange server has anything that faces the internet (OWA, POP, IMAP), then BIS can be used to handle email (only email...calendar and contacts require BES to sync OTA).
    Or, a PC, inside the network (but with an internet path) and logged into the email server (using Outlook), can be left running, using the RIM Desktop Software's Desktop Redirector capability to forward  messages to the BB.
    Those are basically the options.
    Hope that helps! Let us know!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

Maybe you are looking for