PIX OS Upgradation from Version 6.3 to 7.0

[netadmin]

Dear all,

We have a PIX 525 with failover bundle. I would like to know how to upgrade my OS from ver 6.3 to 7.0 in both the Active and Standby firewall.

I would also like to know the bugs/problems that we might face after upgradation and whether it supports policy based nat.

Thanks for your help.

Regards,

G.G. Venkat Raman

[spremkumar]

Hi

Would suggest to check this guide while upgrading the OS version from 6.3 to 7.0 and also the data sheet which has enough details about the enhanced features that you can have/configure up with the upgraded version..

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_upgrade_guides09186a0080369ee2.html

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet0900aecd80225ae1.html

regds

[rsmith]

Two key "gotchas" to think about.

1: The Stateful failover link can NOT be used as a data link in version 7+. (could be used in version 6)

2: Traceroute will not work without adding "inspect icmp error" under the "policy-map global_policy/class inspection_default" configuration area after upgrade.