PIX Os - 6.3 or 7.x ?? Which is "best"

peter-net · ‎02-18-2008

We are running 2 x prodction failover Pixes (UR licence) on 6.3. What advantages exist in going to version 7. We do not deploy VPN, IPSec, IP6 or anything other fancy stuff. Just a simple (though extrememly important) rulebase. We do not use PDM just CLI. Thanks - Peter@it-123.co.uk

JORGE RODRIGUEZ · ‎02-18-2008

Peter,

This is my personal opinion, as far as Im concern PIX500s are in the road of retirement not to far in future , sooner or later PIX500 will reach end of support but right now just as you are I have PIXes running 6.3(5) which is the most statble within the 6.x code, unless you need additional features to be implemented that 6.3(5) does not have then upgrade to 7.x. we have upgraded 515(nonE) to ASAs instead of upgrading code becasue 515 reached end of support and was not able to put it in smartnet, so we have a mix of 6.3(5) PIXs 515Es and ASA5500s. In short, you do not need to upgrade unless you have to use new features in 7.x.

Rgds

Jorge

Jorge Rodriguez

abinjola · ‎02-18-2008

http://www.cisco.com/en/US/docs/security/asa/asa70/release/notes/asa_rn.html#wp207234