ASA 5525-X code 8.6.1 downgrade

[robert.mcclain]

Can I downgrade the firewall code to 8.0, it's running 8.6.1 right now.

[Jouni Forss · Accepted solution]

Hi,

Unfortunately, the new ASA5500-X series only supports the newer software levels. From 8.6(1) onwards. To my understanding it shouldnt be possible to downgrade the ASA any lower from that software level.

Here is a quote from Cisco document

Software
Q. What software is supported on the Cisco ASA 5500-X Series Next-Generation Firewalls?
A. The Cisco ASA 5500-X Series supports Cisco ASA Software Release 8.6.1  and later. CWS requires ASA Software Release 9.0.1 or later. The IPS  service on the ASA 5500-X Series requires Cisco IPS Sensor Software  Release 7.1.4 or later. AVC and WSE require ASA CX Software Release  9.1.1 (Cisco ASA Software Release must be 9.1.1).

Source:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/qa_c67-700608.html

- Jouni

[robert.mcclain]

Thanks Jouni. I was afraid of that as I have to move a PIX 525 with 7.2(1) code to this ASA in a matter of hours...

Here's to a long day.

Thanks again for your reply...

[Jouni Forss]

Hi,

Heres a document I made about the new NAT format of 8.3+ Software levels

https://supportforums.cisco.com/docs/DOC-31116

Heres also a document that might be usefull for you if you are just trying to migrate some NAT configurations fast

https://supportforums.cisco.com/docs/DOC-9129

- Jouni