Upgrading ASAs

[Alex Sykes]

Hi,

We have a pair of ASA5520 firewalls running 8.4(2).  We want to upgrade them because we're having problems with SSL VPNs (see link below).

https://supportforums.cisco.com/thread/2148408

Is there a reason why we should stop at 8.4(3.8) and not go to one of the 9.x releases?  If not, please can you recommend a stable 9.x version?

Also, they're in a clustered pair.  Do you envisage any loss of connectivity when upgrading them (if we do them one at a time)?

Many thanks

Alex

[Marvin Rhoads · Accepted solution]

9.0(2) seems to be the most stable current code. It has the greatest number of bug fixes.

There's no need to go to a version between your current release and that one.

If your HA pair is Active/Standby, a zero downtime upgrade is the supported path.