ASA 5510 software

[scottcummins]

Gentlemen and ladies

I inherited two ASA 5510 devices acting as SIP Proxies, the software they say they have is "Cisco Adaptive Security Appliance Software Version 8.2 (3)". I looked it up and it says this version is from 2010!!! is this correct? and if so, What is the most current version? 9.1.7 interim?..Is this correct and what is the difference between and interim and the "ED" version I see?

[Dennis Mink]

Yes 9.1.7 is the latest one.

its good practice to go through the release notes to check what the difference/ new features are with its previous version. you can get to the release notes by going to the download section of your particular version and read the release notes from there.

Please rate if useful

[scottcummins]

WOW! 7 years, So I assume I cannot go straight from 8.2(3) to 9.1.7 does the document show a progression of upgrades to get to 9.1.7? which CISCO devices were developed to replace the 5510s?

[Marvin Rhoads · Accepted solution]

Frankly if your 5510 is running 8.2(3) and you're not familiar with ASA software I'd just leave it there while planning a replacement with a supported device. The current equivalent device would be one of the 5500-X series - either a 5506-X, 5508-X or 5516-X depending on your specific needs and current utilization.

If you decide to upgrade, you would need to first go to 8.4(5) and then to 9.1(7) as specified in the release notes:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html#pgfId-763574

However that upgrade requires an intermediate knolwedge level of how the NAT and access-list commands in particular work as their syntax changes after 8.2 and the built-in configuration parser does not always change them automatically in a graceful manner.

You might also need a memory upgrade - which may not be available any more via official channels. Reference:

http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#pgfId-238817

[scottcummins]

Marvin

Thanks so much, I really appreciate the information. I am familiar with CISCO products mainly just switches, catalyst and routers, But I have never used nor been involved in configuring the ASA5510. I I will do some research before I even attempt it. I do not believe replacing them is an option right now..Thanks again for all the guidance

[Marvin Rhoads]

You're welcome.

Please mark your question as answered if it has been.

[Marvin Rhoads · Accepted solution]

Like Dennis answered - yes, you are running 7 year old software.

The 5510 was end of sales several years ago and 9.1.x is the last release that will be made available for them. In contrast, current generation ASAs are currently up to 9.7.x

Interim releases are for bug fixes of the release they branch from (e.g. the "ED" release).