See if this helps you. The upgrades have to be incremental and will have two or more steps. For 8.0, you can move to first 8.2 and for others, use the table below. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-f...

Are you using manual commit or auto-commit.

Hi.Have you enabled ACL optimization. If not, have a look at this and enable ithttp://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/traffc_f.html#wp1068726ThanksZubair-Pls rate if post was useful-

Yes, it is possible to have both on the same router. For the remote access VPN , you need to use a dynamic crypto map.crypto dynamic-map dynmap 10  set transform-set 3des-shacrypto map myvpn 10 ipsec-isakmp dynamic dynmapThanksZubair