ASA 5510 Software upgrade

[vipinrajrc]

Hi

I would like to upgrade my ASA 5510 software from 7.0(8) to 7.2.

Could anyone tell me which is the stable 7.2 release?

Is it necessary to upgrade to 7.1 then to 7.2?

Please reply ASAP.

[Jennifer Halim]

Version 7.2.5 is the latest release in the 7.2.x train and contains bug fixes from 7.2.1.

Here is the release notes for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa72/release/notes/asarn725.html

Please kindly check the memory requirement in the release notes.

You can upgrade directly from version 7.0.8 to 7.2.5

Hope that helps.

[vipinrajrc]

Hi

Thanks for your kind reply..

My ASA have 256MB RAM and 256MB FLASH memory...

so it is possible to upgrade to 7.2.5 from 7.0.8 without any problem, right?

Also i have one more doubt, how can i identify unwanted services that are running in an ASA.

Please reply ASAP

[Jennifer Halim]

Yes, the RAM and Flash size that you have is OK to upgrade to 7.2.5.

What do you mean by how to identify unwanted services that are running on the ASA? Are you talking about access-list lines that are not required but is configured? or you are talking about something else?

[vipinrajrc]

Hi,

Thanks for your reply.....

halijenn wrote:
Yes, the RAM and Flash size that you have is OK to upgrade to 7.2.5.
What do you mean by how to identify unwanted services that are running on the ASA? Are you talking about access-list lines that are not required but is configured? or you are talking about something else?

What i meant is not about access-list..    Like dhcp,dns etc.. services..... or please guide me how can optmize the ASA's performance...

Thanks & Regards

Vipin Raj

[Jennifer Halim · Accepted solution]

Ah ok, I understand what you mean now.

I assume you are comparing the ASA with IOS router.

By default, ASA does not really have any services on unless you configure that specific feature, ie; DHCP, DNS, etc.

So unless you specifically configure any features, ASA will not have that feature on.

Typically on ASA, there is nothing specific to disable to optimize performance. Just if you have access-list to have a shorter list compared to a very long winded list of access-list, but when i say long, it would be in the thousands line scenario.

Hope that makes sense.

[vipinrajrc]

Hi

Yes That is...........!!!!!!!!!!!!

Thank you very very much......

[vipinrajrc]

Hi

Also i have one more doubt..

How to identify bugs in ASA's software? Is there any patches for these bugs??

Thanks&Regards

Vipin Raj

[Jennifer Halim]

The resolved and opened bugs are normally listed in the release notes of the software when the software is released.

Not every bug will be relevant to your environment, eg: if you are not passing through voice traffic through your ASA, all the voice related bugs will not be relevant to your ASA. So it depends on if you are hitting on any specific bug.

Typically, you will run the general release of the software, and when you are running into any issue which is software defect related, then you will need to open a TAC case, and an engineer will assist you to troubleshoot and identify which specific bug you are hitting. The engineer will then provide you with the bugID and description as well as workaround and/or resolution.

[vipinrajrc]

Hi...

All cleared............ thank you very very much.....