https://community.cisco.com/t5/network-security/upgrade/m-p/2477614#M267548 <P>Hello Experts</P><P>can someone guide me the best practice approach to upgrade from ASA ver 8.0 to 9.0</P><P>ASA runs NAT, Remote Access, IPSEC VPN</P><P>&nbsp;</P><P>Thanks</P><P>ST</P> Tue, 12 Mar 2019 04:04:35 GMT saquib.tandel 2019-03-12T04:04:35Z https://community.cisco.com/t5/network-security/upgrade/m-p/2477614#M267548 <P>Hello Experts</P><P>can someone guide me the best practice approach to upgrade from ASA ver 8.0 to 9.0</P><P>ASA runs NAT, Remote Access, IPSEC VPN</P><P>&nbsp;</P><P>Thanks</P><P>ST</P> Tue, 12 Mar 2019 04:04:35 GMT https://community.cisco.com/t5/network-security/upgrade/m-p/2477614#M267548 saquib.tandel 2019-03-12T04:04:35Z https://community.cisco.com/t5/network-security/upgrade/m-p/2477615#M267549 <P>If you have older hardware, you need to first verify you have enough memory to support the new image. Here's a<A href="http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#pgfId-48043"> link</A> to the guide for that.</P><P>Then you will have to perform a 2-step upgrade - first to 8.3 or 8.4 and then to your 9.0 target. First refer to the document "<A href="http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html">Cisco ASA 5500 Migration to Version 8.3 and Later</A>" and follow the procedures there.</P><P>To go the last step, follow the procedure in the <A href="http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/release/notes/asarn90.html#90714">9.0(x) Release Notes</A>.</P><P>One thing I would add in addition to what the guides cover - make sure you have a backup including the VPN pre-shared keys. If you copy off your config using the following, it will print them out in plain text:</P><P>term pager 0</P><P>more system:running-config</P><P>Hope this helps - please rate helpful posts.</P> Mon, 14 Apr 2014 19:32:01 GMT https://community.cisco.com/t5/network-security/upgrade/m-p/2477615#M267549 Marvin Rhoads 2014-04-14T19:32:01Z