PIX OS version ??

[yann.boulet]

Hello all,

at the moment i have a pix 525 with an OS V 7.0(4) and ASDM V 5.0(4) i want to upgrade OS and ASDM but in cisco software download i have V 7.2(2) last release.

My question is can i upgrade with a V 7.2(x) or do i need to continue with a V 7.0(x) and what are the differences ?

Thanks

[David White · Accepted solution]

Hi Yann,

You can run either the 7.0 train or the 7.2 train. The 7.0 train is more stable, so if you don't need a new feature introduced in 7.2, then I would stay with 7.0(6).

The bulk of the features added between 7.0 and 7.2 are VPN/WebVPN releated features. You can view the release notes for 7.1.1 and 7.2.1 to see the new features added.

Hope it helps,

David.

[abinjola · Accepted solution]

7.0.4 is FIPS Certified

http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/networking_solutions_audience_business_benefit0900aecd8009a16f.html

Well if you ask my opinion then I would suggest you to run 7.2.2 however no version is entirely bugfree

The other option for you would be to upgrade the firewall to 7.0.6, this code has been

seen as quite a stable code

Refer to the following link for the release notes of 7.0.6 and 7.2.2

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/70_rn/

pix706rn.htm

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_72/rel_no

te/pixrn722.htm

[yann.boulet]

ok so there is no big difference between 7.0 and 7.2 but are there differences between ASDM version because if i have a 7.0 version i need to install a specifical version of ASDM, is there more feature in one or other one version ?

[David White]

Yes, there are additional features in later ASDM release. Specifically, there are enhancements to viewing the syslogs, so you can edit rules by right clicking on the syslog. And ASDM 5.2 also introduced packet-tracer to help determine where a packet may be dropped - based on your config - or what rules a packet is matching as it passes through the box. (Packet tracer was implemented on the ASA side in version 7.2).

Sincerely,

David.