topic Thanks Marvin, Yes I mis in Network Security

asa snmp vulnerability

rajmkcl — Tue, 12 Mar 2019 08:13:59 GMT

Have asa 5525 running on version 8.6.1. On which version I can go supported on the device to fix recent snmp vulnerability.

Hi,The fix for the

pradypan — Sat, 03 Sep 2016 13:01:36 GMT

Hi,

The fix for the vulnerability is been addressed in version 9.1.7.9 which is supported on the platform you are running on. Please find the below link regarding the vulnerability for your reference.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp

Regards
Pradyumna

thanks for quick reply. I am

rajmkcl — Sat, 03 Sep 2016 13:03:45 GMT

thanks for quick reply. I am having failover active standby, can I upgrade with no downtime. Is there any path I need to go for upgrade.

Hi,Since you are running on

pradypan — Sat, 03 Sep 2016 13:08:00 GMT

Hi,

Since you are running on version 8.6.1, you need to follow an upgrade path in order to move to version 9.1.7.9.

8.6.1 -> 9.0.4 -> 9.1.7.9

Also please find the release notes for 9.1.x version for your reference.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html#pgfId-763574

For the HA, you can upgrade with a zero downtime. First upgrade the standby unit. Once done make it as Active unit and then proceed with other unit. (Remember to take a backup of configuration before proceeding with upgrade).

Please find the below document for you reference for upgrading Active/Standby failover pair.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/upgrade/upgrade91.html#pgfId-61610

Regards,
Pradyumna

ahh...got it. thanks.

rajmkcl — Sat, 03 Sep 2016 13:09:45 GMT

ahh...got it. thanks.

Double check your current

Marvin Rhoads — Sat, 03 Sep 2016 15:21:06 GMT

Double check your current version. 8.6(1) is not available on 5520 platform. The 8.6 release was specific to Saleen hardware (X series).

Perhaps you mean 8.4(1).

Thanks Marvin, Yes I mis

rajmkcl — Sat, 03 Sep 2016 16:28:07 GMT

Thanks Marvin, Yes I mis-typed, I mean for 5525.