Stable IOS for ASA 5525 X

[muca]

Hi All,

Anyone can recommend a stable IOS version for ASA5525 X?

Had a look at the release notes for 9.1.x and 8.6.1.

8.6.1 has less bugs so I am considering it.

Regards,

Murilo

[Julio Carvajal]

Hello Muca,

You have an amazing FW I would recommend you to be at least on the 9.x track because of the many, many ,many features available on that new code.

And is also a stable version so I would head that track

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

[sudhir.patil1990]

Hi All,

   We are using cisco ASA 5525x NGFW and looking for stable version... now we are using 9.5 (2) but due to vulnerability scanning report we need to upgrade ASA version....  please tell me which one is a stable version so i will upgrade IOS 

[Marvin Rhoads]

Currently the latest most stable code recommended is 9.4(3)12. It was released on 3 November 2016 and includes bug fixes as noted here:

ASA-943-Interim-Release-Notes

Within the 9.5 code base, 9.5(3)2 is the latest interim release. It is also dated 3 November with release notes as follows:

ASA-953-Interim-Release-Notes

It could be that no current release addresses your scanning results. For instance, there is not yet a publicly available release that addresses CVE-2016-2183 and CVE-2016-6329 as the fixed code is still in Quality Assurance. As always, check the Release Notes and Bug IDs for any specific vulnerabilities. For instance:

Bug ID CSCvb48640

[sudhir.patil1990]

HIi sir,

 Thank your so much for your quick reply.... I need one more help

 sir what is your suggestion for ASA IOS Version 9.6(2) it is stable or not 

[Marvin Rhoads]

The recommendations I posted above were Cisco's based on their installed base of tens of thousands of customers.

Personally, I've never seen an ASA release that I would consider "unstable". (I have been working with them since they were Pix firewalls on release 6.x.)

We are running ASA 9.6 on our corporate firewall and a couple of my customers are as well. I've not seen any problem with it.

Still, your experience may vary depending on the feature set you're using and load on your firewalls. That's why I recommend taking care to read the release notes and make an informed decision.

[sudhir.patil1990]

Thank you very much for a great support and Information.

[Marvin Rhoads]

You're welcome. Please rate the helpful answers.

[Marvin Rhoads]

The 9.x caveats are due to new features more so than it breaking the tried and true functions. Plus if you're using the NGFW (CX) at all, you need 9.1+.

We are currentlly generally deploying 9.1(2) or 9.1(3) on new X series firewalls absent any compelling reason to use an earlier version.

[goodwinag]

We are also running ASA 9.6 on our production firewalls, there have been no issues with this release.

[SudhakarG]

i am planing for migrating FWSM with version 4.1(11) to ASA 5545  so for ASA 5545 which is the cisco recomended IOS version can you please tell me sir..