topic Marvin in Network Security

ASA 5510 software

scottcummins — Fri, 21 Feb 2020 14:04:11 GMT

Gentlemen and ladies

I inherited two ASA 5510 devices acting as SIP Proxies, the software they say they have is "Cisco Adaptive Security Appliance Software Version 8.2 (3)". I looked it up and it says this version is from 2010!!! is this correct? and if so, What is the most current version? 9.1.7 interim?..Is this correct and what is the difference between and interim and the "ED" version I see?

Yes 9.1.7 is the latest one.

Dennis Mink — Mon, 01 May 2017 22:53:47 GMT

Yes 9.1.7 is the latest one.

its good practice to go through the release notes to check what the difference/ new features are with its previous version. you can get to the release notes by going to the download section of your particular version and read the release notes from there.

Please rate if useful

Like Dennis answered - yes,

Marvin Rhoads — Tue, 02 May 2017 00:48:05 GMT

Like Dennis answered - yes, you are running 7 year old software.

The 5510 was end of sales several years ago and 9.1.x is the last release that will be made available for them. In contrast, current generation ASAs are currently up to 9.7.x

Interim releases are for bug fixes of the release they branch from (e.g. the "ED" release).

WOW! 7 years, So I assume I

scottcummins — Tue, 02 May 2017 14:03:04 GMT

WOW! 7 years, So I assume I cannot go straight from 8.2(3) to 9.1.7 does the document show a progression of upgrades to get to 9.1.7? which CISCO devices were developed to replace the 5510s?

Frankly if your 5510 is

Marvin Rhoads — Thu, 31 Aug 2017 03:25:31 GMT

Frankly if your 5510 is running 8.2(3) and you're not familiar with ASA software I'd just leave it there while planning a replacement with a supported device. The current equivalent device would be one of the 5500-X series - either a 5506-X, 5508-X or 5516-X depending on your specific needs and current utilization.

If you decide to upgrade, you would need to first go to 8.4(5) and then to 9.1(7) as specified in the release notes:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html#pgfId-763574

However that upgrade requires an intermediate knolwedge level of how the NAT and access-list commands in particular work as their syntax changes after 8.2 and the built-in configuration parser does not always change them automatically in a graceful manner.

You might also need a memory upgrade - which may not be available any more via official channels. Reference:

http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#pgfId-238817

Marvin

scottcummins — Fri, 05 May 2017 13:00:01 GMT

Marvin

Thanks so much, I really appreciate the information. I am familiar with CISCO products mainly just switches, catalyst and routers, But I have never used nor been involved in configuring the ASA5510. I I will do some research before I even attempt it. I do not believe replacing them is an option right now..Thanks again for all the guidance

You're welcome.

Marvin Rhoads — Fri, 05 May 2017 13:03:22 GMT

You're welcome.

Please mark your question as answered if it has been.