[Solved] Need updated software for ASA 5505 - Page 1
Forum section: electronics / general

author: Halcyon
author_rank: Unknown
timestamp: November 12, 2016, 12:40:19 am
content: It's been quite a while since I had much to do with Cisco gear and I no longer have a partner login to be able to download software updates so hopefully someone on here will be able to help me.I have a Cisco ASA 5505 which is currently running software version 8.4(1). Is anyone able to download the latest software for this device for me?

author: Sal Ammoniac
author_rank: Super Contributor
timestamp: November 12, 2016, 12:46:55 am
content: Is it legal to do that? The reason I'm asking is because I have an ASA 5510 with old firmware that I'd like to update without paying the ridiculous price to Cisco.

author: Halcyon
author_rank: Unknown
timestamp: November 12, 2016, 12:51:53 am
content: Quote from: Sal Ammoniac on November 12, 2016, 12:46:55 amI'm not really bothered one way or another about the legalities. I picked up the device which was headed for the bin (the company a friend of mine worked for at the time was doing a network refresh) and I'm just using it at home. I just want the newer software, I'm not asking to unlock features which haven't been paid for.

author: Monkeh
author_rank: Super Contributor
timestamp: November 12, 2016, 01:08:08 am
content: Quote from: Sal Ammoniac on November 12, 2016, 12:46:55 amLegal? Possibly not, but they're not losing anything because no home user is going to ever pay them for a service contract to get the firmware. You can't take income away from them if it was never going to exist!

author: amyk
author_rank: Super Contributor
timestamp: November 12, 2016, 04:49:14 am
content: Do you mean the files onthis pagelike "asa917-11-k8.bin" ? Just Google the filename...

author: Halcyon
author_rank: Unknown
timestamp: November 12, 2016, 04:55:42 am
content: Quote from: amyk on November 12, 2016, 04:49:14 amTo download directly from Cisco, you need an active service contract. I'd also prefer to source the file from Cisco rather than risk some dodgy image of dubious quality.

author: Monkeh
author_rank: Super Contributor
timestamp: November 12, 2016, 04:59:55 am
content: Quote from: Halcyon on November 12, 2016, 04:55:42 amCisco give you a filename.. and a checksum.So having searched for asa917-11-k8.bin and downloaded it from the first source I found, the checksum is:$ sha512sum asa917-11-k8.binbdc0b000e282457a1d3858aafffe5b1aead1c0ac1cad74eaea8d7b024f8398afde9cf9ded9ad74a1b5b3713a4e05cc109022ac685f6acc9ba8960b6aebff2c3f asa917-11-k8.binI'll let you do the same, and work out the odds of an SHA512 collision on a modified firmware image..

author: Halcyon
author_rank: Unknown
timestamp: November 12, 2016, 05:07:08 am
content: Quote from: Monkeh on November 12, 2016, 04:59:55 amYes... good point. Thanks.

author: nowlan
author_rank: Frequent Contributor
timestamp: November 12, 2016, 06:23:33 am
content: Cisco is a pain the ass. I have an asa5505 too. Only used it for home lab.I think there was a loop hole that they would give you access to a new firmware if there is a security bug discovered.Not sure the NSA bacon exploits work on 8.4 etc.Else there is a cheaper smartnet that is only for support, not Next Business Day. I think regardless is $50 or something from memory.Still no reason to pay for an obsolete device.

author: Halcyon
author_rank: Unknown
timestamp: November 12, 2016, 08:11:41 am
content: Quote from: nowlan on November 12, 2016, 06:23:33 amIt sure is. It's like they've deliberately over-complicated things that don't need to be complicated, just so they can sell certifications. Don't get me wrong, they make good gear, but there are increasing numbers of "better" alternatives out there, even for carrier and Government markets. I'll eventually replace this (and some other gear I have) with Ubiquiti products.Thanks everyone for their advice. I managed to get it updated to 9.1(7)11 with ASDM 7.6(2)150.