SWA and SMA and CM compatibility

[Henk Fictorie - Ulrich]

Current situation:

SMA v13.8.1-101, WSA 12.5.4-011, CM is 12.5

We want to upgrade to SMA 14.2.0-241 and WSA 14.5.1-016. The old compatibility matrix is no longer available. The new version at https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/web-compatibility/index.html doesn't show the compatible CM versions any more.

My question is does SMA v14.2.0-241support the CM version 12.5? Are new versions of the CM available in the SMA v14.2.0-241 and are they compatible with WSA 14.5.1-016?

kind regards Henk

[balaji.bandi]

SMA CM not compatibility with other version.

check the correct version of compatibility :

https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/web-compatibility/index.html

Going to 14.X version smart License introduced so you need to bare that in mind.

what you need to is below steps help you :

1. Take the backups both masked password and unmasked password.

2. Do the Upgrade in Maintenance window, since it will affect the Proxy users.

3. Do not make any changes in SMA until all the Upgrade finish ( WSA and SMA and CM config)

4. Upgrade the WSA to latest version (you only see 14.X version in the Upgrade Option) - 15.X is latest code (but you need to Upgrade to 14.X  then 15.X  if you like to do so.

5. Test Proxy using manually pointing to WSA see all working as expected - Make sure you also check against AD authentication if you are using for user SSO

6. Upgrade SMA to latest 14.X  desire code - Once you finish upgrade it will give you Option to Move to CM to 15.X

follow the steps and use as guided.

7. Go to WSA from SMA and initialize with new config (you need admin account to initialize)

8. then push config and test it.

Note you need admin account for upgrade

[amojarra · Accepted solution]

Hello @Henk Fictorie - Ulrich 

[1] Regarding the CM, lets say if your WSA is on version 12.5.x-xxx then CM 12.5 and if you are on version 14.5.x-xxx then you need to use CM 14.5.

[2] If the WSA is compatible with your SMA's version then the CM will be there.

[3] So, back to your question about SMA 14.0.2-241, it supports WSA versions :

14.5.1-016 (MD) 14.5.1-008 (MD) 14.5.0-537 (GD) 14.5.0-498 (LD)
14.0.4-005 (MD) 14.0.3-502 (HP) 14.0.1-053 (GD) 14.0.1-040 (LD) 14.0.1-014 (LD)
12.5.6-008 (MD) 12.5.5-501 (HP) 12.5.5-008 (MD) 12.5.5-004 (MD) 12.5.4-011 (MD) 12.5.4-005 (MD) 12.5.3-002 (MD) 12.5.2-011 (MD) 12.5.2-007 (MD) 

so then it will supports : CM 14.5 , CM 14.0 and CM 12.5

[4] SMA 14.2.0-241 (MD) is compatible with WSA 14.5.1-016 (MD) and you need to use CM 14.5 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++