What's the difference between 8.0 and 9.3 Cisco ASA software?

[Miroslav Berkov]

Is anyone show me the link with features of 8.0 and 9.3 Cisco ASA software? And what's the catch?

[Marvin Rhoads · Accepted solution]

There are literally hundreds of new features introduced in all the releases between 8.0 (initially released in 2007) and 9.3. They are summarized in this document.

The catch? Well upgrading can be a challenge if you're not familiar with how your configuration works.

Most notably Cisco changed the way they do NAT and some key aspects of access-list syntax as of version 8.3. If your appliance is running 8.0 it most likely will need a memory upgrade.

Also, the older appliances cannot be upgraded beyond the 9.1(x) releases (exception 5505) as they have been End of Sales since Fall 2013.

The newer 5500-X series started out at version 8.6 and have multi-core CPUs and support the latest versions. They also have the capability of running advanced services in software module (e.g. the FirePOWER services for IPS, web filtering and malware protection).

[Miroslav Berkov]

Thank you. But what the difference between asa922-4-k8.bin and asa922-8-k8.bin?

[Marvin Rhoads]

9.2(2.8) is what is known as an interim release of the software. Per Cisco interim release notes:

"They contain bug fixes which address specific issues found since the last Feature or Maintenance release.  The images are fully supported by Cisco TAC and will remain on the download site only until the next Maintenance release is available. If you do not have a specific problem which is resolved by an Interim release, we recommend that you use the Feature or Maintenance release images.

Important:  These images were not fully regression tested.  Each individual fix was unit tested, and the image has had a limited amount of automated regression testing to confirm a baseline of functionality.  Keep this testing status in mind if you decide to run them in a production environment. We strongly encourage you to upgrade to a fully tested Maintenance or Feature release when it becomes available."

Interim release notes are not generally published on the general product support page but if you go to the downloads page, there is usually a link to the release notes specific to the interim release.

Here is a link to the ASA 9.2(2.9) interim release notes. They describe the individual bug fixes rolled up in that release.

[Miroslav Berkov]

So, is asa932-200-smp-k8.bin compatible with Cisco ASA-5505-BUD-K9?

[Marvin Rhoads]

No. Anything with "smp" in the file name is only compatible with the 5500-X series. The "smp" stands for symmetric multiprocessor and requires a multi-core CPU. The 5505 (and all the classic 5500 series) only has a single core CPU.

The highest-numbered release compatible with the ASA 5505 (as of this writing) is ASA 9.2(3) (file name asa923-k8.bin).

The currently recommended (and actually more recent) release on the ASA 5505 is 9.1(5.21) interim build (21 December 2014).

The information regarding available software and recommended release levels can all be seen on the 5505 software download page.

[Miroslav Berkov]

Thank you