topic best practices guide. in Network Security https://community.cisco.com/t5/network-security/best-practices-guide/m-p/2160163#M361086 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I am currently not aware of any really thorough guide on this, though then again I havent really looked. Maybe there would be idea in trying to make that kind of document myself since the question naturally keeps coming up again and again. <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P><P></P><P>I would say the following things are the things that need most redoing when migrating from 8.2 (or below) to 8.3 (or newer)</P><UL><LI>NAT configurations<UL><LI>Because the configuration format has changed</LI></UL></LI><LI>ACL configurations, mostly those attached to any kind of interface towards which NAT is applied<UL><LI>Because the traffic is now opened towards the Real IP instead of NAT IP</LI></UL></LI><LI>Some VPN configuration formats<UL><LI>Because of having both ikev1 and ikev2, your configurations might need an added "ikev1" in the Phase1/Phase2 configurations</LI></UL></LI></UL><P></P><P>Naturally if you have some specific questions on how something would be configured in a new software we can help with that.</P><P></P><P>- Jouni</P></BODY></HTML> Fri, 01 Mar 2013 07:26:49 GMT Jouni Forss 2013-03-01T07:26:49Z best practices guide. https://community.cisco.com/t5/network-security/best-practices-guide/m-p/2160162#M361085 <P>&nbsp;&nbsp;&nbsp;&nbsp; I'm about to&nbsp; upgrade from an ASA5520 to ASA5525, is there a best practices guide anyone know if I can follow for this project.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P> Tue, 12 Mar 2019 01:07:56 GMT https://community.cisco.com/t5/network-security/best-practices-guide/m-p/2160162#M361085 bruce.thornton 2019-03-12T01:07:56Z best practices guide. https://community.cisco.com/t5/network-security/best-practices-guide/m-p/2160163#M361086 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I am currently not aware of any really thorough guide on this, though then again I havent really looked. Maybe there would be idea in trying to make that kind of document myself since the question naturally keeps coming up again and again. <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P><P></P><P>I would say the following things are the things that need most redoing when migrating from 8.2 (or below) to 8.3 (or newer)</P><UL><LI>NAT configurations<UL><LI>Because the configuration format has changed</LI></UL></LI><LI>ACL configurations, mostly those attached to any kind of interface towards which NAT is applied<UL><LI>Because the traffic is now opened towards the Real IP instead of NAT IP</LI></UL></LI><LI>Some VPN configuration formats<UL><LI>Because of having both ikev1 and ikev2, your configurations might need an added "ikev1" in the Phase1/Phase2 configurations</LI></UL></LI></UL><P></P><P>Naturally if you have some specific questions on how something would be configured in a new software we can help with that.</P><P></P><P>- Jouni</P></BODY></HTML> Fri, 01 Mar 2013 07:26:49 GMT https://community.cisco.com/t5/network-security/best-practices-guide/m-p/2160163#M361086 Jouni Forss 2013-03-01T07:26:49Z