ASA upgrade plan

[mohamed sebaey]

Hello

We are planning to replace our firewalls 5010 and 5020 to new 5585X . Our existing SW is v8.2 i need to do upgrade for our existing sw and take backup of configuration and apply to our new FW. 

Q1- If i upgraded my existing FWs "5010 , and 5020" from v8.2 to 8.4 then 9, our existing configuration will upgraded automaticaly.

Q2-what are steps to do upgrade from v8.2 to higher?.

thanks in advance 

[Vibhor Amrodia]

Hi,

The most important thing to remember is the upgrade path:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html#pgfId-763574

I would recommend , ASA 8.2.x >> 8.4.6 >> 9.x

For the changes on the Syntax , refer:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html

If you have an Active/Standby or Active/Active HA , you can upgrade with the Zro Downtime upgrade:-

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111867-asa-failover-upgrade.html

Thanks and Regards,

Vibhor Amrodia

[mohamed sebaey]

Thanks a lot , as usual your answers hit successfully dmy questions . Only one question , if i am going to upgrade as you mentioned above , the syntax of configuration will change automatically. For example

static (inside,outside) x.x.x.x y.y.y.y

to

object  x.x.x.

network x.x.x.x

nat(inside,outside) y.y.y.y

thanks

[Vibhor Amrodia · Accepted solution]

Hi,

Yes , it will be converted automatically to the Object/Auto NAT as you have described.

Thanks and Regards,

Vibhor Amrodia