The Adaptive Security Appliance (ASA) is Cisco's latest and greatest firewall, and it's quickly overtaking the PIX firewall in popularity. When first released, the ASA 5500 series firewalls came with software version 7.0. Subsequent upgrades featured versions 7.1, 7.2, and 8.0.

Ignoring how ridiculous it is for a hardware vendor to require continual payments to receive software fixes, let’s look at how to obtain cisco IOS update software without a valid support contract. What most people don’t know is that Cisco has a security vulnerability policy that states. Even if you purchase a software upgrade (the aforementioned $275 for enterprise base) all you get is that initial release, and all future updates are available only to SmartNet customers. All specifications made are without engagement. All prices listed include VAT, ARF (Advance Recycling Fee) and SUISA royalty plus any shipment costs arising. Detailed brand names, trademarks, product descriptions and images are property of the relevant companies. Cisco was charged with an antitrust lawsuit claiming it locks out independent network maintenance providers without a Cisco SMARTnet maintenance agreement. Apple and Hewlett-Packard freely offer software update downloads on their websites,' while on Cisco's website, the bug fix toolkit is only accessible to SMARTnet subscribers, said Donald.

Cisco Smartnet 24x7x4

The Cisco ASA is a good firewall, and I like it much better than the PIX. While I wouldn't call it the best firewall available, Cisco's adding more and more features to it all the time.

But even more important than new ASA features is staying current with the software versions to keep the firewall patched with the latest security fixes. How do you upgrade the software on an ASA? Let's walk through the process.

What does version 8.x have to offer?

According to the release notes for ASA software version 8.x, the upgrade boasts a number of new features.

• EIGRP routing is now available.
• The upgrade adds high-availability functionality.
• There are several SSL VPN enhancements — including a unique onscreen keyboard, which helps prevent keystroke logging.
• SSL VPN support for Windows Vista and Mac OS X clients is now available.
• ASA sports a new AnyConnect VPN client.
• There's built-in local certificate authority.
• There's VPN load balancing between other ASA firewalls.
• The upgrade features additional browser-based SSL VPN features.
• It includes transparent NAT.

Where can I find the upgrade?

To download the ASA software, you must have a valid SMARTnet agreement. Log onto the Cisco Web site; you can find the download here: http://www.cisco.com/cgi-bin/tablebuild.pl/asa

Enter your login information, and click OK. The Web page will list the software downloads. This Web site offers all versions of the ASA software, the Adaptive Security Device Manager (ASDM) GUI for the ASA, and even translators to enable your SSL VPN messages to appear in other languages.

For this example, I'm downloading the latest and greatest: Cisco ASA software 8.0.2 ED, as shown in Figure A.

Figure A

How do I upgrade ASA to the latest version?

Once you've downloaded the necessary software, follow these steps:

1. Back up your current configuration file using TFTP. Alternatively, you can just paste it into Notepad and save it on your hard drive. Just make sure you have a copy somewhere in case something goes wrong.

2. Determine which version of ASA software you have now. Here's an example:

ASA5510# sh ver

Cisco Adaptive Security Appliance Software Version 7.0(6)

Device Manager Version 5.0(6)

ASA5510# dir

Directory of disk0:/

5 -rw- 5474304 00:05:00 Jan 01 2003 asa706-k8.bin

675 -rw- 5823980 16:34:26 Nov 07 2006 asdm506.bin

255426560 bytes total (244064256 bytes free)

ASA5510#

Cisco Smartnet Support

3. You can use TFTP to move the image to the ASA. Here's an example:

ASA5510# copy tftp disk0

Address or name of remote host []? 10.253.15.77

Source filename []? asa802-k8.bin

Destination filename [disk0]? disk0:asa802-k8.bin

Accessing tftp://10.253.15.77/asa802-k8.bin...!!!!!! (truncated)

Leica Smartnet Network

Writing file disk0:/asa802-k8.bin... !!!!! (truncated)

14524416 bytes copied in 118.210 secs (123088 bytes/sec)

3a. Or, all of you GUI lovers out there can use the ASDM GUI to do the transfer, as shown in Figure B.

Figure B

4. Rename your old version to make sure you boot off the new version. Here's an example:

ASA5510# rename asa706-k8.bin asa706-k8.old

5. You can choose to upgrade your version of ASDM using the same method. Version 8.x of the ASA software can run version 6.x of the ASDM. In fact, if you reboot your ASA without upgrading the ASDM, you may not be able to use ASDM after it reboots. You'll find this out when using the show version command, as shown below:

Cisco Adaptive Security Appliance Software Version 8.0(2)

Detected an old ASDM version.

You will need to upgrade it before using ASDM.

Get more resources

• 'Get to know Cisco's new security appliance: ASA 5500'
• 'Cisco administration 101: Learn the difference between PIX and ASA'

David Davis has worked in the IT industry for 12 years and holds several certifications, including CCIE, MCSE+I, CISSP, CCNA, CCDA, and CCNP. He currently manages a group of systems/network administrators for a privately owned retail company and performs networking/systems consulting on a part-time basis.

Want to learn more about router and switch management? Automatically sign up for our free Cisco Routers and Switches newsletter, delivered each Friday!

Contrary to popular belief Cisco SMARTnet is not a warranty. It also does not include Cisco application software products, such as security, IP telephony, and network management. This article will help clarify what is/isn't included in SMARTnet and the roles it can play in managing your network.

Cisco Upgrade Software

1. What is Cisco SMARTnet Service?

Cisco SMARTnet Service is an award-winning technical support service that can give your IT staff direct, anytime access to Cisco experts and online self-help resources required to resolve issues with most Cisco products. With SMARTnet Service, you can choose from a broad range of service delivery options for Cisco products.

2. What is included with Cisco SMARTnet Service?

Cisco SMARTnet Service provides the following device-level support:

• Direct access 24 hours a day, 365 days a year to specialized experts in the Cisco Technical Assistance Center (TAC).
• Extensive self-help support through Cisco’s online knowledge base, communities, resources, and tools.
• Smart, proactive diagnostics and immediate alerts on select devices enabled with Cisco Smart Call Home feature.
• Operating system (OS) software updates, including both minor and major releases within your licensed feature set.
• Advance hardware replacement options, including 2-hour, 4-hour, and next-business-day (NBD) replacement, as well as return for repair (RFR).
• Optional onsite service that provides a field engineer who can install replacement parts at your location.

3. Why should you purchase Cisco SMARTnet Service?

By covering networking devices with a Cisco SMARTnet contract, you can:

• Improve network availability, reliability, stability, and security with direct access to networking engineers at Cisco
• Reduce the cost of network ownership by using Cisco expertise, knowledge, and availability
• Increase ROI by up to 192 percent having access to Cisco operating system software enhancements
• Expedite time to repair with the right parts at the right time to resolve issues quickly
• Better manage scarce internal expert resources at all locations when utilizing the proactive diagnostics and real-time alerts available with Smart Call Home, on select devices
• Empower your IT staff and improve productivity and revenue per employee with access to tools and technical support documentation that can increase self-sufficiency and technical knowledge

4. Is Cisco SMARTnet Service only limited to break/fix insurance?

No. The Cisco SMARTnet Service offers you help handling complex network operation and management issues such as:

• Advance software configuration
• Interoperability and upgrade questions
• Hardware and software information

5. Is support for Cisco application software products, such as security, IP telephony, and network management, included in the Cisco SMARTnet Service?

Cisco Software Upgrade Without Smartnet Leica Download

No, application support is not covered in SMARTnet. Cisco does offer software application support services separately that provide support for Cisco application software products such as security, IP telephony, and network management. There are currently four support offers available:

• Cisco Software Application Support Service (SAS)— includes maintenance and minor releases
• Cisco Software Application Support Service with Upgrades (SASU)—includes all components of SAS plus upgrades
• Cisco UC Essential Operate Service (ESW)—includes maintenance and minor releases
• Cisco UC Software Subscription Service

6. What is included in a Cisco warranty?

Warranties provide short-term limited liability for Cisco to repair and/or replace defects in Cisco products. They are limited in both the duration and the support they offer, and most warranties do not include Cisco TAC support, software updates, or any of the additional benefits obtained under a support service contract. It is the responsibility of Cisco to repair and/or replace the Cisco product within the time frame specified in the warranty card that accompanied the originally purchased Cisco product. Elements covered under a typical Cisco warranty are:

• Hardware: This guarantees that the piece of hardware will be free of defects in material and workmanship under normal use, or it will be replaced by Cisco in the designated time period.
• Software: This guarantees that the physical media are free from defects or they will be replaced by Cisco. The warranty is explicitly “as is,” and no new releases are included.

7. If a product is already covered under the standard Cisco warranty, why should I buy Cisco SMARTnet Service during the warranty duration?

Leica Smartnet Map

The Cisco SMARTnet Service provides more robust levels of support than are available under a Cisco warranty. For most products, Cisco warranties are limited in duration (detailed specifically by product type) compared to Cisco SMARTnet Service. Features available under a Cisco SMARTnet Service contract that are not covered under a warranty are:

• Rapid replacement of hardware in NBD, 4-hour, or 2-hour dispatch options (restrictions apply; see Cisco SMARTnet data sheet for additional information, as well as Return for Repair on select video products)
• Continuous technical support through the Cisco TAC
• Latest OS updates, including both minor and major releases within the licensed feature set
• Registered access to online self-help resources and tools
• Proactive troubleshooting and alerts for Call Home - capable devices

8. What is Cisco Smart Call Home?

Cisco Smart Call Home, a secure, smart service capability of Cisco SMARTnet Service, provides proactive, detailed diagnostics and real-time alerts on many products to help you identify and resolve issues quickly, conserving valuable staff time and improving network availability. With automated network device monitoring, Smart Call Home dynamically and securely gathers device information, sending an alert when a problem is detected. Using Cisco intellectual capital, Smart Call Home can enable early diagnosis and remediation of device-related issues through proactive, rules-based problem resolution. As a result, customers can dramatically streamline their device maintenance, accelerate problem resolution, and reduce their network operating expense. Call home-enabled devices can continuously monitor their own health and automatically notify you of potential issues using secure transmissions. If a serious problem arises, Smart Call Home automatically detects it and can generate a Cisco Technical Assistance Center (TAC) service request to remediate the issue. Smart Call Home also provides you with access to a Smart Call Home web portal that contains personalized Call Home messages, recommendations, and more for all your Call Home devices.

9. What additional features are available under the Cisco SMARTnet ONSITE option?

Cisco Smartnet Pricing

Cisco SMARTnet onsite includes the same capabilities as Cisco SMARTnet, with the addition of an onsite technician for parts replacement and installation. It is available with all SMARTnet advance hardware replacement service levels.

SMARTnet Onsite Hardware Replacement Service Levels

SMARTnet Description and Service Level SKU Decoder

10. How do I buy SMARTnet?

Most SMARTnet is sold on an annual basis. 3 Year agreements will have bigger discounts than single year. The next time you send an RFQ, request a 3 year SMARTnet quote with an option to lease for 36 months with annual payments. The discounts should offset the cost of any interest. More information on how to accomplish this can be found here.

If you're still with me, Thank you. I hope this was interesting. I personally found the SMARTnet Description and Service Level SKU Decoder extremely helpful when reading SMARTnet quotes.

Please note due to its complexity that some of this content has been consolidated from multiple Cisco articles which I will listed below.