ASA Upgrade from 8.4 to 9.x version...

[soc.micron]

Hi ,

we have firewall ASAs in our environment running with  ASA firmware version 8.4, and we are palnning to migrate to 9.x version considering it has less vlunerbilities and Bugs free.

Is there any Major changes ? like migrating from 8.2 to 8.3.

Is there any precautions/recommendations that we need to take into account for AnyConnect and S-2-S VPNs ?

please also suggest for the Minimum Hardware requirements.

[mvsheik123]

Hi Deepak,

I recently upgraded couple of 5505s from 8.4->9.x during some testing purpose and did not notice any major changes. Couple things (did not not impact any of my testing though)...

1. It adds some udp/tcp deny rules in the beginning of configuration.

2. Ip v4 and v6 terms, you can specifically use (instead of 'ip')

As every environment is different, I suggest you check the release notes. Hardware- same memory as 8.4.

hth

MS

[Richard Burts]

Going from 8.2 to 8.3 was a BIG change. Going from 8.4 to 9.x is not so big a change. Certainly some things will change and some things will be added in the new version. So you need to check the documentation and especially the release notes. If you have opportunity to test the upgrade with a machine that is not in production that would be very good. But overall I do not remember any big changes that would impact your upgrade.

HTH

Rick