08-01-2013 07:42 AM - edited 03-11-2019 07:20 PM
When I go to the OS software section for the ASA, I see the latest release are 8.2.5, 8.4.6, 9.1.2, 9.0.3. Does anybody know the difference between them? Is there a comparison chart for this purpose?
Thanks
Solved! Go to Solution.
08-01-2013 08:02 AM
The "New Features by Release" document has a detailed listing.
At a high level:
- 8.2.x is the older release train. Old style NAT syntax and works with less memory required on older hardware. Fewer next generation firewall features (identity, context, etc.).
- 8.4.x. Includes new NAT syntax, introduces Identity features among others.
- 9.0.x. Integrates features from 8.4 8.5 and 8.6 (platform-specific) into a single image. Couple new incremental features. Supports clustering on high end appliances.
- 9.1.x Introduces CX Context Aware security module support.
The 3rd ordinal (.x) generally speaking may add a few minor features and is mostly bug fixes within a given major release.
08-01-2013 08:30 AM
Yes. Assuming your appliance has adequate memory,
Either 8.4 (6) or 9.0(3) are the most stable current releases (in terms of bug fixes addressed).
Going with 9.0(3) would be a better choice in my opinion.
08-01-2013 08:02 AM
The "New Features by Release" document has a detailed listing.
At a high level:
- 8.2.x is the older release train. Old style NAT syntax and works with less memory required on older hardware. Fewer next generation firewall features (identity, context, etc.).
- 8.4.x. Includes new NAT syntax, introduces Identity features among others.
- 9.0.x. Integrates features from 8.4 8.5 and 8.6 (platform-specific) into a single image. Couple new incremental features. Supports clustering on high end appliances.
- 9.1.x Introduces CX Context Aware security module support.
The 3rd ordinal (.x) generally speaking may add a few minor features and is mostly bug fixes within a given major release.
08-01-2013 08:06 AM
Hi,
I am not sure if there is any chart to compare these softwares. I think the Cisco Router softwares had (or still has) a site online where you can actually compare software and what they support. I don't know of any such thing for the Cisco firewalls though I haven't really looked.
The best place to start would probably be to look at the ASA release notes section which mentions what was added in each Major, Minor or Maintanance update.
The complete list should be here
http://www.cisco.com/en/US/products/ps6120/prod_release_notes_list.html
The software level 8.2 is the last software before the big change in the NAT configuration format. Any other software level after that has a completely different NAT configuration format among other things like ACLs.
- Jouni
08-01-2013 08:24 AM
Yeh, I read those release note but am thinking if there's a chart, it'll be more simple for me to make the decision.
Thanks for your feedback.
.
08-01-2013 08:33 AM
Hi,
Sadly the only place where you can actually compare softwares in any way is this
http://tools.cisco.com/ITDIT/CFN/
But it seems to be only related to the Routers and Switches. No mention of ASAs there
I haven't seen any other listing other than the one I posted and the even greater one that Marvin posted.
- Jouni
08-01-2013 08:38 AM
Hi, Jouni
Thanks for the link, I don't know there's such a tool before. It's usefull. Hope Cisco can add other products into it.
08-01-2013 08:21 AM
Hi, Marvin
Thanks for the clarification. Do you think the 9.0 can fit the normal daily job if I don't need/have the Context Aware security?
08-01-2013 08:30 AM
Yes. Assuming your appliance has adequate memory,
Either 8.4 (6) or 9.0(3) are the most stable current releases (in terms of bug fixes addressed).
Going with 9.0(3) would be a better choice in my opinion.
08-01-2013 08:38 AM
We got the newer ASA so the memory should be OK.
Thank you.
08-01-2013 09:31 AM
You'll need the new variant with integrated SSD in order to run CX services. It's only been available a couple of months, or so. And appropriate licencing of course
11-22-2017 11:26 PM
Dear All
Anybody can help me that I want to upgrade asa 5555x form 9.1 to 9.8.
Is there any syntax change?
Do I need to do again the configuration?
Regards
Syed
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide