70-2
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 70 Using Image Manager
Getting Started with Image Manager
the steps that are necessary to ensure your devices are configured to work with Image Manager.
This section contains the following topics:
Image Manager Supported Platforms and Versions, page70-2
Device Configurations supported by Image Manager, page70-2
Image Manager Supported Image Types, page70-3
Administrative Settings for Image Manager, page 70-4
Bootstrapping Devices for Image Manager, page 70-6
Image Manager Supported Platforms and Versions
Image Manager is available only for ASA devices. The following devices support Image Manager:
All legacy ASA models—ASA 5505/10/20/40/50/80
ASA 5585
ASA 5512/15/25/35/45/55
ASA-SM module for Catalyst 6K
The following devices are not supported and are filtered out in the devices tab of the Image Manager
unified view:
PIX firewall
FWSM blade
ASA device managed by AUS
Devices unmanaged in Security Manager
Other device types—IPS and Routers
Image Manager supports image upgrade for ASA device version from 7.x onwards. The target image
version that can be used to upgrade is not restricted. Image upgrade to the highest ASA version supported
in Security Manager 4.4, that is ASA version 9.0(1) and 9.1(1), has been tested.
Warning
Image downgrade is not restricted, but is done at your own risk. Image Manager does not validate
downgrade cases.
Device Configurations supported by Image Manager
In addition to supporting image updates on standalone ASA devices, Image Manager manages the
filesystem and supports seamless image update for ASA devices specially configured for high
availability and scalability. Following configurations are supported:
Multiple context mode—ASA in multiple context mode where a single ASA can be partitioned into
multiple virtual devices/firewalls. Refer to
http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/general/ha_contexts.html.
Each of these virtual firewalls are represented in CSM as independent devices. When Image
Manager updates the image on the physical unit hosting these virtual devices, it updates device
properties of all virtual devices with the new image information.