cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

4768
Views
0
Helpful
10
Replies
Highlighted
Beginner

ASA 8.2, 8.4, 9.0, 9.1

When I go to the OS software section for the ASA, I see the latest release are 8.2.5, 8.4.6, 9.1.2, 9.0.3. Does anybody know the difference between them? Is there a comparison chart for this purpose?

Thanks

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Hall of Fame Guru

The "New Features by Release" document has a detailed listing.

At a high level:

- 8.2.x is the older release train. Old style NAT syntax and works with less memory required on older hardware. Fewer next generation firewall features (identity, context, etc.).

- 8.4.x. Includes new NAT syntax, introduces Identity features among others.

- 9.0.x. Integrates features from 8.4 8.5 and 8.6 (platform-specific) into a single image. Couple new incremental features. Supports clustering on high end appliances.

- 9.1.x Introduces CX Context Aware security module support.

The 3rd ordinal (.x) generally speaking may add a few minor features and is mostly bug fixes within a given major release.

View solution in original post

Highlighted

Yes. Assuming your appliance has adequate memory,

Either 8.4 (6) or 9.0(3) are the most stable current releases (in terms of bug fixes addressed).

Going with 9.0(3) would be a better choice in my opinion.

View solution in original post

10 REPLIES 10
Highlighted
Hall of Fame Guru

The "New Features by Release" document has a detailed listing.

At a high level:

- 8.2.x is the older release train. Old style NAT syntax and works with less memory required on older hardware. Fewer next generation firewall features (identity, context, etc.).

- 8.4.x. Includes new NAT syntax, introduces Identity features among others.

- 9.0.x. Integrates features from 8.4 8.5 and 8.6 (platform-specific) into a single image. Couple new incremental features. Supports clustering on high end appliances.

- 9.1.x Introduces CX Context Aware security module support.

The 3rd ordinal (.x) generally speaking may add a few minor features and is mostly bug fixes within a given major release.

View solution in original post

Highlighted
Mentor

Hi,

I am not sure if there is any chart to compare these softwares. I think the Cisco Router softwares had (or still has) a site online where you can actually compare software and what they support. I don't know of any such thing for the Cisco firewalls though I haven't really looked.

The best place to start would probably be to look at the ASA release notes section which mentions what was added in each Major, Minor or Maintanance update.

The complete list should be here

http://www.cisco.com/en/US/products/ps6120/prod_release_notes_list.html

The software level 8.2 is the last software before the big change in the NAT configuration format. Any other software level after that has a completely different NAT configuration format among other things like ACLs.

- Jouni

Highlighted

Yeh, I read those release note but am thinking if there's  a chart, it'll be more simple for me to make the decision.

Thanks for your feedback.

.

Highlighted

Hi,

Sadly the only place where you can actually compare softwares in any way is this

http://tools.cisco.com/ITDIT/CFN/

But it seems to be only related to the Routers and Switches. No mention of ASAs there

I haven't seen any other listing other than the one I posted and the even greater one that Marvin posted.

- Jouni

Highlighted

Hi, Jouni

Thanks for the link, I don't know there's such a tool before. It's usefull. Hope Cisco can add other products into it.

Highlighted
Beginner

Hi, Marvin

Thanks for the clarification. Do you think the 9.0 can fit the normal daily job if I don't need/have the Context Aware security?

Highlighted

Yes. Assuming your appliance has adequate memory,

Either 8.4 (6) or 9.0(3) are the most stable current releases (in terms of bug fixes addressed).

Going with 9.0(3) would be a better choice in my opinion.

View solution in original post

Highlighted

We got the newer ASA so the memory should be OK.

Thank you.

Highlighted

You'll need the new variant with integrated SSD in order to run CX services. It's only been available a couple of months, or so. And appropriate licencing of course

Highlighted

Dear All

 

Anybody can help me that I want to upgrade asa 5555x form 9.1 to 9.8.

Is there any syntax change?

Do I need to do again the configuration?

 

Regards

Syed

Content for Community-Ad