Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Stable IOS for ASA 5525 X

Hi All,

Anyone can recommend a stable IOS version for ASA5525 X?

Had a look at the release notes for 9.1.x and 8.6.1.

8.6.1 has less bugs so I am considering it.

Regards,

Murilo

9 REPLIES

Stable IOS for ASA 5525 X

Hello Muca,

You have an amazing FW I would recommend you to be at least on the 9.x track because of the many, many ,many features available on that new code.

And is also a stable version so I would head that track

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Community Member

Hi All,

Hi All,

   We are using cisco ASA 5525x NGFW and looking for stable version... now we are using 9.5 (2) but due to vulnerability scanning report we need to upgrade ASA version....  please tell me which one is a stable version so i will upgrade IOS 

Hall of Fame Super Silver

Currently the latest most

Currently the latest most stable code recommended is 9.4(3)12. It was released on 3 November 2016 and includes bug fixes as noted here:

ASA-943-Interim-Release-Notes

Within the 9.5 code base, 9.5(3)2 is the latest interim release. It is also dated 3 November with release notes as follows:

ASA-953-Interim-Release-Notes

It could be that no current release addresses your scanning results. For instance, there is not yet a publicly available release that addresses CVE-2016-2183 and CVE-2016-6329 as the fixed code is still in Quality Assurance. As always, check the Release Notes and Bug IDs for any specific vulnerabilities. For instance:

Bug ID CSCvb48640

Community Member

HIi sir,

HIi sir,

 Thank your so much for your quick reply.... I need one more help

 sir what is your suggestion for ASA IOS Version 9.6(2) it is stable or not 

Hall of Fame Super Silver

The recommendations I posted

The recommendations I posted above were Cisco's based on their installed base of tens of thousands of customers.

Personally, I've never seen an ASA release that I would consider "unstable". (I have been working with them since they were Pix firewalls on release 6.x.)

We are running ASA 9.6 on our corporate firewall and a couple of my customers are as well. I've not seen any problem with it.

Still, your experience may vary depending on the feature set you're using and load on your firewalls. That's why I recommend taking care to read the release notes and make an informed decision.

Community Member

Thank you very for a great

Thank you very much for a great support and Information.

Hall of Fame Super Silver

You're welcome. Please rate

You're welcome. Please rate the helpful answers.

Hall of Fame Super Silver

Stable IOS for ASA 5525 X

The 9.x caveats are due to new features more so than it breaking the tried and true functions. Plus if you're using the NGFW (CX) at all, you need 9.1+.

We are currentlly generally deploying 9.1(2) or 9.1(3) on new X series firewalls absent any compelling reason to use an earlier version.

Community Member

We are also running ASA 9.6

We are also running ASA 9.6 on our production firewalls, there have been no issues with this release.

817
Views
11
Helpful
9
Replies
CreatePlease to create content