ASA 5505 upgrade path

[ViviTheMage]

I have an ASA 5505 running 7.2(4) should I go to 8.2(4), or can I go to 9.11?

I am also curious, what is the recomended upgrade path? And what are the iteration differences? The (4), and any differences between .xx's?

Oh, and what corresponding ASDM versions should/can I use?

 

[drebo]

I'd go to 8.21 and stop.

It's, in my experience, the most stable.

 

[ViviTheMage]

Why do you say that? I don't think I can get 8.21...it is not an option in the cisco downloads.

 

[m1ldslide1]

Whatever the latest in the 8.2 train is probably your safest bet. If you don't need features after that, I wouldn't risk the config changes that the 8.3 release and later require.

 

[ViviTheMage]

Okay, will grab 8.2.5.ED

What are the big changes to 8.3+ ? I read something about NAT and IPSEC?

 

[DistraughtSysop]

The Cisco site is not fun to navigate, but it has all the documentation that you need.

http://www.cisco.com/en/US/docs/security/asa/roadmap/asa_new_features.html

 

[ViviTheMage]

Thanks...which version had the biggest leap?

 

[Lemieux66]

Thanks...which version had the biggest leap?

8.2 to 8.3 -- Major changes to NAT and ACLs...

https://supportforums.cisco.com/docs/DOC-12690

 

[RadiclDreamer]

I just did the 8.2 -> 8.3 change, its been a little painful, but i just figured im going to have to get used to the "new way" sooner or later so i might as well jump in.

 

[Lithium381]

If you're comforatable with the way things are, stop at 8 2 5; as everyone has said at 8.3 there are pretty substantial changes... i just upgraded an old PIX from 6.3 to 8.04 and it changed a LOT of syntax.. is this production or at your house?

 

[ViviTheMage]

This was going to be a play environment