[Solved] Need updated software for ASA 5505

[Halcyon]

It's been quite a while since I had much to do with Cisco gear and I no longer have a partner login to be able to download software updates so hopefully someone on here will be able to help me.

I have a Cisco ASA 5505 which is currently running software version 8.4(1). Is anyone able to download the latest software for this device for me?

[Sal Ammoniac]

Is it legal to do that? The reason I'm asking is because I have an ASA 5510 with old firmware that I'd like to update without paying the ridiculous price to Cisco.

[Halcyon]

Is it legal to do that? The reason I'm asking is because I have an ASA 5510 with old firmware that I'd like to update without paying the ridiculous price to Cisco.

I'm not really bothered one way or another about the legalities. I picked up the device which was headed for the bin (the company a friend of mine worked for at the time was doing a network refresh) and I'm just using it at home. I just want the newer software, I'm not asking to unlock features which haven't been paid for.

[Monkeh]

Is it legal to do that? The reason I'm asking is because I have an ASA 5510 with old firmware that I'd like to update without paying the ridiculous price to Cisco.

Legal? Possibly not, but they're not losing anything because no home user is going to ever pay them for a service contract to get the firmware. You can't take income away from them if it was never going to exist!

[amyk]

Do you mean the files on this page like "asa917-11-k8.bin" ? Just Google the filename...

[Halcyon]

Do you mean the files on this page like "asa917-11-k8.bin" ? Just Google the filename...

To download directly from Cisco, you need an active service contract. I'd also prefer to source the file from Cisco rather than risk some dodgy image of dubious quality.

[Monkeh]

Do you mean the files on this page like "asa917-11-k8.bin" ? Just Google the filename...

To download directly from Cisco, you need an active service contract. I'd also prefer to source the file from Cisco rather than risk some dodgy image of dubious quality.

Cisco give you a filename.. and a checksum.

So having searched for asa917-11-k8.bin and downloaded it from the first source I found, the checksum is:
$ sha512sum asa917-11-k8.bin
bdc0b000e282457a1d3858aafffe5b1aead1c0ac1cad74eaea8d7b024f8398afde9cf9ded9ad74a1b5b3713a4e05cc109022ac685f6acc9ba8960b6aebff2c3f  asa917-11-k8.bin

I'll let you do the same, and work out the odds of an SHA512 collision on a modified firmware image..

[Halcyon]

Do you mean the files on this page like "asa917-11-k8.bin" ? Just Google the filename...

To download directly from Cisco, you need an active service contract. I'd also prefer to source the file from Cisco rather than risk some dodgy image of dubious quality.

Cisco give you a filename.. and a checksum.

So having searched for asa917-11-k8.bin and downloaded it from the first source I found, the checksum is:
$ sha512sum asa917-11-k8.bin
bdc0b000e282457a1d3858aafffe5b1aead1c0ac1cad74eaea8d7b024f8398afde9cf9ded9ad74a1b5b3713a4e05cc109022ac685f6acc9ba8960b6aebff2c3f  asa917-11-k8.bin

I'll let you do the same, and work out the odds of an SHA512 collision on a modified firmware image..

Yes... good point. Thanks.

[nowlan]

Cisco is a pain the ass. I have an asa5505 too. Only used it for home lab.

I think there was a loop hole that they would give you access to a new firmware if there is a security bug discovered.
Not sure the NSA bacon exploits work on 8.4 etc.

Else there is a cheaper smartnet that is only for support, not Next Business Day. I think regardless is $50 or something from memory.
Still no reason to pay for an obsolete device.

[Halcyon]

Cisco is a pain the ass.

It sure is. It's like they've deliberately over-complicated things that don't need to be complicated, just so they can sell certifications. Don't get me wrong, they make good gear, but there are increasing numbers of "better" alternatives out there, even for carrier and Government markets. I'll eventually replace this (and some other gear I have) with Ubiquiti products.

Thanks everyone for their advice. I managed to get it updated to 9.1(7)11 with ASDM 7.6(2)150.