Cisco Cisco ASA for Nexus 1000V Series Switch

For users migrating from the FWSM, see Migrating to the Cisco ASA Services Module from the FWSM.

This section describes how to upgrade to the latest version of the ASA image or the Field-Programmable 
Device (FPD) image and includes the following topics:

Upgrading the ASA Image, page 6

Upgrading the FPD Image, page 8

Upgrading the ASA from the Supervisor 720 to the Supervisor 2T, page 11

For ASDM procedures, see the ASDM release notes.

Viewing Your Current Version, page 6

Upgrading the Operating System and ASDM Images, page 6

Use the show version command to verify the software version of your ASA. 

This section describes how to install the ASDM and operating system (OS) images using TFTP. For FTP 
or HTTP, see the “Managing Software and Configurations” chapter in the configuration guide.

Autostate

The switch supervisor engine can send autostate messages to the ASASM about the status of 
physical interfaces associated with ASA VLANs. For example, when all physical interfaces 
associated with a VLAN go down, the autostate message tells the ASA that the VLAN is down. 
This information lets the ASA declare the VLAN as down, bypassing the interface monitoring 
tests normally required for determining which side suffered a link failure. Autostate messaging 
provides a dramatic improvement in the time the ASA takes to detect a link failure (a few 
milliseconds as compared to up to 45 seconds without autostate support).

The switch supports autostate messaging only if you install a single ASA in the chassis.

See the following Cisco IOS command: firewall autostate.

Virtual Switching System

The ASASM supports VSS when configured on the switches. No ASA configuration is 
required.