A client ordered a new ASA5520 ,but urgently needed a firewall inplace so loaned the client one of my older 5520's running 6.22, thinking that once their equipment is delivered I will downgrade the software on the new device install the running config and then upgrade it back to 6.3.
Problem - The down grade was no issue at all the new firewall works perfectly on ver 6.22 config is 100% , when I upgrade to 6.3 the name format has changed and has not imported the naming convention of the hosts to the new version, thus resulting in the majority of the ACL's not being implimented.
I created a doc to manually change the naming std from "name x.x.x.xDescription " to " object network Description
Oncethis was imported the hostnames all appear fine, however there are still issues with the ACLS, long story short, only if I manually modify the config does it appear to be ok for ver 6.3 , my question is why doesnt this happen automatically or have I missed something?
I upgraded through ASDM this time and it has migrated +/- 60% of the host names to the new nameing std, however the rest it appear to have just ignored, the ACL's appear to be intact this time ,I dont have any Natting on the firewall,
For example it has an entry like this
object network DMZ_Server_x.x host x.x.x.x description Created during name migration
but then further on in the conf it still has the other host names in the old format of name x.x.x.x description, and has not removed these type entries, comments?
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...