topic Re: Upgrading IOS and ASDM on ASA5550 in Network Security

Upgrading IOS and ASDM on ASA5550

darkdi0dx — Mon, 11 Mar 2019 19:53:38 GMT

Hi all,

I'm about to upgrade the IOS-image on my ASA5550 and also at the same time upgrade the ASDM. I have a few questions about this event.

Some info about the ASA5550;

It's running IOS-version 7.2(4)

ASDM-version 5.2(4)

Total Flash is 256 MB

Total Memory is 4096 MB

My question is;

In order to upgrade from IOS-version 7.2(4) to 8.4(1) i have to do it step-by-step, or IOS-version-by-IOS-version, right? I can't just jump from 7.2(4) to 8.4(1) right?

So, if i'm correct these are the following IOS-upgrades i have to do on my ASA5550,

From 7.2.4 to

7.2.5 to,

8.0.5 to,

8.2.4 to,

8.3.2 to,

8.4.1

For ASDM it's looks easier;

From 5.2.4 to 6.4.1

Best regards,

Tom

Re: Upgrading IOS and ASDM on ASA5550

Jennifer Halim — Mon, 21 Feb 2011 12:50:30 GMT

No, you can upgrade directly from version 7.2.4 to version 8.4.1.

Here is the release notes for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html#wp503408

If you are upgrading it via ASDM, then I would suggest that you follow this procedure:

http://www.cisco.com/en/US/docs/security/asa/asa84/asdm64/release/notes/asdmrn64.html#wp324107

Please also note that the NAT feature has completely changed from version 8.3 onwards. There is no more static NAT, NAT and global pair, NAT exemption. It has been changed to Object NAT and Twice NAT. If you are not aware of this changes, you might want to read up on the feature prior to upgrade:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_overview.html#wp1122015

Network object NAT: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_objects.html#wpxref44865

Twice NAT: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_rules.html#wpxref17102

Hope that helps.

Re: Upgrading IOS and ASDM on ASA5550

darkdi0dx — Mon, 21 Feb 2011 13:10:00 GMT

Hi Jennifer,

Thank's for the fast answer. I thought you had to do a step-by-step IOS-upgrade but this looks a lot easier if i can upgrade directrly to the latest IOS-version. No conflict with memory issues either?

So, I will most likely upgrade it via ASDM and the upgrade wizard. Do you know if the upgrade wizard is pointing me to the correct IOS/ASDM-version or do i have a choice between different multiple IOS-versions in the wizard?

Thanks a lot for your help here, i will now read all this documentation. I will come back to ya if/when i have more questions and strange findings 🙂

-=Tom=-

Re: Upgrading IOS and ASDM on ASA5550

darkdi0dx — Mon, 21 Feb 2011 13:38:21 GMT

Jennifer,

One more thing, regarding NAT when upgrading från 7.2(4) to 8.4(1) Will the ASDM upgrade wizard make the necessary config-changes when it comes to the NAT rules that already exist and "convert" them to the new NAT-format? Or is that something i have to do after upgrading?

-= Tom =-

Re: Upgrading IOS and ASDM on ASA5550

Jennifer Halim — Mon, 21 Feb 2011 21:58:06 GMT

Firstly, you will have to download the ASA OS and ASDM image from cisco.com first as the ASA will not come with any preloaded OS.

Your memory is fine as that is what is required for ASA5550 on later version of code.

And lastly, yes, when you perform the upgrade, the NAT will be automatically converted to the new version of NAT, and it will also keep a copy of the old version running config, just in case if you need to roll back.

Re: Upgrading IOS and ASDM on ASA5550

darkdi0dx — Tue, 22 Feb 2011 08:10:09 GMT

Thank you very much for your help Jennifer

-= Tom =-

Re: Upgrading IOS and ASDM on ASA5550

Jennifer Halim — Tue, 22 Feb 2011 08:36:59 GMT

You are welcome.

Please kindly mark the post as answered if you have no further question. Thank you.