Upgrading IOS and ASDM on ASA5550

[darkdi0dx]

Hi all,

I'm about to upgrade the IOS-image on my ASA5550 and also at the same time upgrade the ASDM. I have a few questions about this event.

Some info about the ASA5550;

It's running IOS-version 7.2(4)

ASDM-version 5.2(4)

Total Flash is 256 MB

Total Memory is 4096 MB

My question is;

In order to upgrade from IOS-version 7.2(4) to 8.4(1) i have to do it step-by-step, or IOS-version-by-IOS-version, right? I can't just jump from 7.2(4) to 8.4(1) right?

So, if i'm correct these are the following IOS-upgrades i have to do on my ASA5550,

From 7.2.4 to

7.2.5 to,

8.0.5 to,

8.2.4 to,

8.3.2 to,

8.4.1

For ASDM it's looks easier;

From 5.2.4 to 6.4.1

Best regards,

Tom

[Jennifer Halim]

No, you can upgrade directly from version 7.2.4 to version 8.4.1.

Here is the release notes for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html#wp503408

If you are upgrading it via ASDM, then I would suggest that you follow this procedure:

http://www.cisco.com/en/US/docs/security/asa/asa84/asdm64/release/notes/asdmrn64.html#wp324107

Please also note that the NAT feature has completely changed from version 8.3 onwards. There is no more static NAT, NAT and global pair, NAT exemption. It has been changed to Object NAT and Twice NAT. If you are not aware of this changes, you might want to read up on the feature prior to upgrade:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_overview.html#wp1122015

Network object NAT: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_objects.html#wpxref44865

Twice NAT: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_rules.html#wpxref17102

Hope that helps.

[darkdi0dx]

Hi Jennifer,

Thank's for the fast answer. I thought you had to do a step-by-step IOS-upgrade but this looks a lot easier if i can upgrade directrly to the latest IOS-version. No conflict with memory issues either?

So, I will most likely upgrade it via ASDM and the upgrade wizard. Do you know if the upgrade wizard is pointing me to the correct IOS/ASDM-version or do i have a choice between different multiple IOS-versions in the wizard?

Thanks a lot for your help here, i will now read all this documentation. I will come back to ya if/when i have more questions and strange findings :-)

-=Tom=-

[darkdi0dx]

Jennifer,

One more thing, regarding NAT when upgrading från 7.2(4) to 8.4(1) Will the ASDM upgrade wizard make the necessary config-changes when it comes to the NAT rules that already exist and "convert" them to the new NAT-format? Or is that something i have to do after upgrading?

-= Tom =-

[Jennifer Halim]

Firstly, you will have to download the ASA OS and ASDM image from cisco.com first as the ASA will not come with any preloaded OS.

Your memory is fine as that is what is required for ASA5550 on later version of code.

And lastly, yes, when you perform the upgrade, the NAT will be automatically converted to the new version of NAT, and it will also keep a copy of the old version running config, just in case if you need to roll back.

[darkdi0dx]

Thank you very much for your help Jennifer

-= Tom =-

[Jennifer Halim · Accepted solution]

You are welcome.

Please kindly mark the post as answered if you have no further question. Thank you.