Migrate two ASA5520 Stateful from Ios 8.0 to 8.4

[lbellicaud]

Hello everybody,

We try to migrate two ASA stateful Active / Passive from version 8.0 to 8.4 but many of acl rules and Nat no longer working.

We must go through the version 8.2?

The release 8.4 changes everything and seems to me not too stable, it'sl best to stay in 8.2 or 8.3 !!!

thank you for your answers

[varrao]

Hi Ibellicaud,

Yes, when you are migrating from ASA 8.0 to ASA 8.4, there is a major change in the NAT and ACL rules, therefore you should have some downtime to troubleshoot during upgradation, because all the NAT rules may not migrate completely. I woudl suggest you to kindly go through the link before upgrading:

https://supportforums.cisco.com/docs/DOC-12690

If you do not want to upgrade to version 8.4 because of nat issues, you can upgarde to version 8.2.5, which is the latest version in ASA 8.2.x chain.

Hope this helps,

Thanks,

Varun

[lbellicaud]

Hi Varun,

After migrating from version 8.0 to 8.4, here are the errors that we had. I have attached the log file.

What do you think?

thanks

[varrao]

Hi,

the errors that you get, these nats were not migrated to the ASA 8.4 version, if you are facing any traffic related issues due to them, you might need to add them manually.

Thanks,

Varun