7-20
Cisco ASA Series Firewall CLI Configuration Guide
 
Chapter 7      ASA FirePOWER Module
  Managing the ASA FirePOWER Module
Session to the Software Module From the ASA
Use the ASA FirePOWER CLI to configure basic network settings and to troubleshoot the module.
To access the ASA FirePOWER software module CLI from the ASA, you can session from the ASA. 
(You cannot session to a hardware module running on a 5585-X.)
You can either session to the module (using Telnet) or create a virtual console session. A console session 
might be useful if the control plane is down and you cannot establish a Telnet session. In multiple context 
mode, session from the system execution space.
In either a Telnet or a Console session, you are prompted for a username and password. You can log in 
with any username configured on the ASA FirePOWER. Initially, the admin username is the only one 
configured (and it is always available). The initial default password is Sourcefire for the full image, and 
Admin123 for the boot image.
• Telnet session: 
session sfr 
When in the ASA FirePOWER CLI, to exit back to the ASA CLI, enter any command that would 
log you out of the module, such as logout or exit, or press Ctrl-Shift-6, x.
• Console session: 
session sfr console 
The only way out of a console session is to press Ctrl-Shift-6, x. Logging out of the module leaves 
you at the module login prompt.
Note Do not use the session sfr console command in conjunction with a terminal server where Ctrl-Shift-6, 
x is the escape sequence to return to the terminal server prompt. Ctrl-Shift-6, x is also the sequence to 
escape the ASA FirePOWER console and return to the ASA prompt. Therefore, if you try to exit the ASA 
FirePOWER console in this situation, you instead exit all the way to the terminal server prompt. If you 
reconnect the terminal server to the ASA, the ASA FirePOWER console session is still active; you can 
never exit to the ASA prompt. You must use a direct serial connection to return the console to the ASA 
prompt. Use the session sfr command instead of the console command when facing this situation.
Upgrade the System Software
Before applying an upgrade, ensure that the ASA is running the minimum required release for the new 
version; you might need to upgrade the ASA prior to upgrading the module. For more information about 
applying upgrades, see the FireSIGHT System User Guide or the online help in FireSIGHT Management 
Center.
For ASDM management, you can apply upgrades to the system software and components using 
Configuration > ASA FirePOWER Configuration > Updates. Click Help on the Updates page for 
more information.