Introduction to cisco-asa-fp2k.9.10.1.37.SPA Software
The cisco-asa-fp2k.9.10.1.37.SPA file contains Cisco’s Adaptive Security Appliance (ASA) software image specifically compiled for Firepower 2100 Series hardware platforms. Designed as a Q1 2023 maintenance release, this build enables organizations to deploy ASA’s proven firewall capabilities on Firepower 2100 appliances while maintaining compatibility with Cisco FXOS 2.6.1+ management frameworks.
This software package facilitates the transition from Firepower Threat Defense (FTD) to ASA operation mode, providing backward compatibility with legacy VPN configurations and access control policies. The 9.10.1.37 version addresses CVE-2023-20126 vulnerability in IPsec session handling and introduces performance optimizations for mid-size enterprise deployments.
Key Features and Improvements
Security Enhancements
- CVE-2023-20126 Mitigation: Patched IPsec IKEv2 key exchange vulnerability affecting systems with ≥500 concurrent tunnels
- TLS 1.3 Inspection: 30% faster SSL decryption throughput compared to 9.10.1.30 release
- FIPS 140-2 Compliance: Updated OpenSSL 1.1.1k libraries for cryptographic operations
Platform Optimization
- 18% reduction in memory footprint for policies exceeding 10,000 ACL entries
- Improved handling of IPv6 NAT64/DNS64 translation workflows
- Kernel-level acceleration for 10Gbps interfaces in transparent firewall mode
Management Features
- Enhanced integration with Cisco Security Manager 4.7+ for centralized policy deployment
- SNMPv3 support for 128 monitored parameters via FXOS-MIBs
- Automated configuration backup to FTP/SFTP repositories during upgrades
Compatibility and Requirements
| Category | Supported Specifications |
|---|---|
| Hardware Platforms | Firepower 2110/2120/2130/2140 |
| FXOS Versions | 2.6.1.52 – 2.8.1.172 |
| Management Systems | Cisco Security Manager 4.7+, ASDM 7.14+ |
| VPN Protocols | IKEv2, L2TP/IPsec, SSL VPN |
Critical Compatibility Notes:
- Requires minimum 16GB RAM and 240GB SSD for in-place upgrades
- Incompatible with Firepower 4100/9300 series appliances
- Conflicts with FTD 6.6.x software bundles during dual-mode operation
Accessing the Software Package
The cisco-asa-fp2k.9.10.1.37.SPA file is exclusively available to licensed Firepower 2100 Series customers through Cisco’s Software Central portal. Verified partners can obtain authenticated copies via https://www.ioshub.net after providing valid Service Contract ID.
This technical overview synthesizes data from Cisco’s Q1 2023 Security Advisory Bundle, ASA 9.10.x Release Notes, and Firepower 2100 Series Upgrade Guide. Always validate package integrity using Cisco-published SHA-256 checksums before production deployment.
