Code Upgrade on ASA 5520

[jayanth.r]

Hello Experts Team

I have 4 Firewalls which are ASA 5520 and running with Code 8.1.5.2 and want to know what next IOS can be upgraded onto these firewalls.

As this is Critical expecting a faster answer on this.

Looking forward for an positive reply immediately.

Thanks & Regards

Jay

[JP Miranda Z]

Hi Jay,

Well your question can be answer depending on what you want to do, are you hitting any vulnerability on your 5520's? if not why are you interested on upgrading the ASAs? You can check cisco.com under the software for the 5520's and you will be able to find the latest version of 8.2 or even the latest version of 9.1. 

You can upgrade directly from 8.1 to the latest version of 8.2.5.59, these are the release notes for that interim release:

http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html

If you are interested on upgrading to 9.1 you need to consider the changes on the syntax of some commands like nat.

These are the release notes of 9.1:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html#pgfId-763574

For this version you definitely need to consider the upgrade path:

Current ASA Version	First Upgrade to:	Then Upgrade to:
8.2(x) and earlier	8.4(5)	9.1(3) or later
8.3(x)	8.4(5)	9.1(3) or later
8.4(1) through 8.4(4)	8.4(5) or 9.0(4)	9.1(3) or later
8.4(5) and later	—	9.1(3) or later
8.5(1)	9.0(4)	9.1(3) or later
8.6(1)	9.0(4)	9.1(3) or later
9.0(1)	9.0(4)	9.1(3) or later
9.0(2) or later	—	9.1(3) or later
9.1(1)	9.1(2)	9.1(3) or later
9.1(2) or later	—	9.1(3) or later

Hope this info helps!!

Rate if helps you!! 

-JP-

[Pulkit Saxena]

JP has answered it perfectly, however just adding the memory requirement point if in case you plan to upgrade to 8.3 and higher.

Check this link out :

https://supportforums.cisco.com/document/48646/asa-83-upgrade-what-you-need-know

This should answer most of your queries.

-

Pulkit