topic ASA downgrade from 8.3 to 8.2 in Network Security

ASA downgrade from 8.3 to 8.2

Kashish_Patel — Mon, 11 Mar 2019 23:13:54 GMT

Hi,

I want to downgrade my test ASA box from 8.3(2) to 8.2(2)16. I have gone through cisco doc to know the downgrade command etc.

http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.html#wp72161

I also understand the configuration changes which will happen after I downgrade.

I don't understand the effect of downgrade on activation keys and licenses as I am quite new to cisco ASA product line.

Can some ASA expert help me in understanding how the licenses and activation keys will be affected as a result of downgrading?

Here is an output from "show version":

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited perpetual

Maximum VLANs : 100 perpetual

Inside Hosts : Unlimited perpetual

Failover : Active/Active perpetual

VPN-DES : Enabled perpetual

VPN-3DES-AES : Enabled perpetual

Security Contexts : 2 perpetual

GTP/GPRS : Disabled perpetual

SSL VPN Peers : 2 perpetual

Total VPN Peers : 250 perpetual

Shared License : Disabled perpetual

AnyConnect for Mobile : Enabled perpetual

AnyConnect for Cisco VPN Phone : Disabled perpetual

AnyConnect Essentials : Enabled perpetual

Advanced Endpoint Assessment : Disabled perpetual

UC Phone Proxy Sessions : 2 perpetual

Total UC Proxy Sessions : 2 perpetual

Botnet Traffic Filter : Disabled perpetual

Intercompany Media Engine : Disabled perpetual

This platform has an ASA 5510 Security Plus license.

Serial Number: JMX1040K08X

Running Permanent Activation Key: 0x150fc441 0x302a5c0d 0x55d0ad38 0xdd94d428 0x0b39e396

Configuration register is 0x1

Configuration last modified by enable_15 at 04:10:14.411 UTC Tue May 29 2012

PS: I rate useful posts.

Thanks,

Kashish

ASA downgrade from 8.3 to 8.2

Jennifer Halim — Thu, 31 May 2012 12:59:22 GMT

There won't be any affect by downgrading the ASA from 8.3 to 8.2 as most of your license are default license except the AnyConnect Essentials and AnyConnect for Mobile license.

One question that i have is are you running Active/Standby failover on the ASA, or you just have a standalone ASA?

If you have standalone ASA, then there is nothing to worry about.

If you have Active/Standby ASA, then you would need to check if your other ASA has the AnyConnect Essentials and AnyConnect Mobile license as well. If you don't, then the failover will get disabled. For version 8.2 and below, for failover to work, you would need to have the same license on both ASA. For version 8.3 and above, you don't have to have the same license on both ASA, and failover will work.

Hope that helps.

ASA downgrade from 8.3 to 8.2

Kashish_Patel — Thu, 31 May 2012 15:08:20 GMT

Hi Jennifer,

Thanks for replying.

One question that i have is are you running Active/Standby failover on the ASA, or you just have a standalone ASA?

My unit is a standalone unit.

So even if I downgrade to 8.2 , everything should work fine right (including licenses and keys)?

Thanks,

Kashish

ASA downgrade from 8.3 to 8.2

varrao — Thu, 31 May 2012 15:40:48 GMT

Hi Kashish,

eith you downgrade or upgarde, it never affects the license or keys of the ASA, they would remain the same. Everything would work fine.

Thanks,
Varun Rao
Security Team,
Cisco TAC

ASA downgrade from 8.3 to 8.2

Jennifer Halim — Thu, 31 May 2012 16:12:10 GMT

Yes, you are right. Everything should work fine including licenses and keys.

ASA downgrade from 8.3 to 8.2

Kashish_Patel — Thu, 31 May 2012 16:32:31 GMT

Thanks Jennifer and Varun.