topic Re: ASA Upgrade IOS Selection in Network Security

ASA Upgrade IOS Selection

de1denta — Fri, 21 Feb 2020 15:55:45 GMT

Hi All,

I need some advice with software selection for an ASA hardware upgrade.

I have a customer that has an ASA 5512 that is running version 9.2(4)33 and I need to upgrade them to an ASA 5516-X, however this firewall does support ASA 9.2, and I'm not sure if to use 9.4, 9.6, 9.7, 9.8 or 9.9

I need to support the same services as the ASA 5512X on 9.2, so no new features etc. What is the best practice here with software selection? I just need to advise the best software version to ensure that the upgrade is as seamless/risk free as possible.

Thank you

Re: ASA Upgrade IOS Selection

Francesco Molino — Fri, 29 Jun 2018 04:30:15 GMT

Hi

I recommend going with a recommended version which are 9.4.4, 9.6.4 and 9.8.2.

I'll personally prefer going with 9.8.2 to get latest security patches applied even if you don't have new features up to now.

Re: ASA Upgrade IOS Selection

de1denta — Fri, 29 Jun 2018 06:29:19 GMT

Hi Francesco,

Thank you for the response.

Looking at 9.8.2, there is an interim release of 38. Do you recommend installing the interim releases or the main release?

Thanks

Re: ASA Upgrade IOS Selection

Francesco Molino — Sat, 30 Jun 2018 16:53:39 GMT

I personally go with interim as soon as they got the star saying recommended stable version.
I know some people won't go with interim.

Re: ASA Upgrade IOS Selection

Marvin Rhoads — Sun, 01 Jul 2018 14:27:14 GMT

I agree with @Francesco Molino.

ASA 9.8(2)38 is a good choice.