Upgrade of ASA 5500 v 8.2 to 8.4

[adedipeopeoluwa]

Hello all,

I want to upgrade our asa ios from 8.2 to 8.4. I will like to know if my nat syntax will be converted i.e NAT commands on 8.2 is quite different from that of 8.4. 

[Karsten Iwen · Accepted solution]

Yes, they will be converted. But the result is a whole mess and for all my migrations I decided to completely rewrite them.

For you there is another decision to make: Your ASA is nearly EOL and needs to be replaced completely or you put your organization at risk (well, with 8.2 you already do). Some of your options are:

1. Migrate from 8.2 to 8.4 and 9.1x. From there you can easily migrate to a new ASA 5500-X
2. Dump your config completely and configure a new ASA with FTD (Firepower Threat Defense) which will be the most relevant software for Firewalling with ASA and Firepower Appliances in the future.
3. If you don't have a strong ASA-background also consider a Meraki MX appliance for firewalling. Biggest drawback here is the Lack of AnyConnect Remote-Access VPN.