ASA 5585x to FPR4110 (ASA only) migration upgrade path

[kishanpatel500]

I'm ordering new FPR4110s to replace me ASA5585x HA pair which is currently running 9.6(4)25.

When ordering the FPR4110, i have the option of getting it with FXOS 2.2 (with ASA 9.8.2 image) or FXOS 2.0 (with ASA 9.6.2 image).

I  want to be able to copy my config from the 5585x onto the new FPR ASA...and then upgrade both FXOS/ASA to what i want.

According to the compatibility charts, 2.2 does not support 9.6(4) so i need to request FXOS 2.0 when i order (otherwise i will need to downgrade FXOS before i create a ASA logical device on 9.6(4))

If i have understood correctly, this would mean my upgrade path would be:

• FXOS from 2.0(1.xxx) to 2.1(1.116)
• ASA from 9.6(4)25 to 9.7(1)4
• FXOS from 2.1(1.116) to 2.2(1.70)
• ASA from 9.7(1) to 9.8(1)
• FXOS from 2.2(1.70) to 2.6(1.157)
• ASA from 9.8(1) to 9.12(1)

Is this correct?

[Marvin Rhoads · Accepted solution]

Your ASA 5585-X configuration syntax does not differ between 9.6(x) and later releases. So just setup the new appliance with the target releases and put in the configuration from your 5585-X, modifying it to account for interface naming convention changes first. You would also need to remove the boot variable and ASDM file specifications from the original configuration.

9.12(1) is a bit aggressive for the target version. I'd suggest the latest 9.10(1) interim release for better stability.

[kishanpatel50]

Excellent.

In that case, I should stay on FXOS 2.2(2.91)?

[kishanpatel500]

Sorry i meant, should i then upgrade from the default 2.2 to 2.6(1)

[Marvin Rhoads]

While not strictly necessary, upgrading your FX-OS to the current 2.6(1.157) would give you the most recent version with the latest bug fixes as well as the ability to run ASA 9.12 when you are ready for that.

It also would allow you to make this disruptive low level upgrade in advance of moving the system into production status.