topic Re: PIX OS version ?? in Network Security

PIX OS version ??

yann.boulet — Mon, 11 Mar 2019 09:55:51 GMT

Hello all,

at the moment i have a pix 525 with an OS V 7.0(4) and ASDM V 5.0(4) i want to upgrade OS and ASDM but in cisco software download i have V 7.2(2) last release.

My question is can i upgrade with a V 7.2(x) or do i need to continue with a V 7.0(x) and what are the differences ?

Thanks

Re: PIX OS version ??

David White — Wed, 04 Apr 2007 13:48:36 GMT

Hi Yann,

You can run either the 7.0 train or the 7.2 train. The 7.0 train is more stable, so if you don't need a new feature introduced in 7.2, then I would stay with 7.0(6).

The bulk of the features added between 7.0 and 7.2 are VPN/WebVPN releated features. You can view the release notes for 7.1.1 and 7.2.1 to see the new features added.

Hope it helps,

David.

Re: PIX OS version ??

abinjola — Wed, 04 Apr 2007 17:59:17 GMT

7.0.4 is FIPS Certified

http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/networking_solutions_audience_business_benefit0900aecd8009a16f.html

Well if you ask my opinion then I would suggest you to run 7.2.2 however no version is entirely bugfree

The other option for you would be to upgrade the firewall to 7.0.6, this code has been

seen as quite a stable code

Refer to the following link for the release notes of 7.0.6 and 7.2.2

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/70_rn/

pix706rn.htm

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_72/rel_no

te/pixrn722.htm

Re: PIX OS version ??

yann.boulet — Tue, 10 Apr 2007 12:44:34 GMT

ok so there is no big difference between 7.0 and 7.2 but are there differences between ASDM version because if i have a 7.0 version i need to install a specifical version of ASDM, is there more feature in one or other one version ?

Re: PIX OS version ??

David White — Tue, 10 Apr 2007 12:49:00 GMT

Yes, there are additional features in later ASDM release. Specifically, there are enhancements to viewing the syslogs, so you can edit rules by right clicking on the syslog. And ASDM 5.2 also introduced packet-tracer to help determine where a packet may be dropped - based on your config - or what rules a packet is matching as it passes through the box. (Packet tracer was implemented on the ASA side in version 7.2).

Sincerely,

David.