07-22-2014 05:20 PM - edited 03-11-2019 09:31 PM
I have a couple of never-used ASA5525-Xs that have been lying around, and I am trying to figure out what software to use. They currently have 8.6(1)2 and thought I should probably upgrade to the latest and greatest.
When I drill down through the Cisco download section I end up with "Cisco ASA 5585-X CX Security Services Processor" as my only choice, other than a couple of modules I don't have. The file description is "ASA-CX System Software for 5500-X and 5585-X platforms", so I guess it's applicable to all the ASA NGs.
So is this the new software for ASAs? The ASAs I have are not CX versions, and I have no need for content management, so I'm wondering if I should be using something else.
Thanks.
Solved! Go to Solution.
07-22-2014 07:22 PM
07-22-2014 07:22 PM
07-23-2014 01:11 PM
Hey thanks. I thought "software on chassis" was a heading not a link, duh. Still seems strange having the 5585cx listed in there though, even if it is the same file.
This particular network is pretty basic, about 30 servers split between an inside and DMZ network, and an internet connection. I'm just permitting some https and sftp traffic inbound, a handful of VPN tunnels and that's about it, no workstations. Do you think I should upgrade, or is it just going to give me a bunch of features I don't need?
07-23-2014 07:38 PM
8.6 was the initial release on that hardware. I'd definitely go with at least the 9.1(2) for the bug fixes if nothing else.
Unless you need anything specifically released on the later versions (like BGP) or run into one of the later-resolved caveats, you'll be best served by 9.1(2) at this time.
07-23-2014 09:29 PM
hi marvin,
we're going to order a few of this appliance.
is it advisable to go for 9.1(2) code rather than leave it at default (8.6)?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide