Too many bugs on ASA 8.3?

[jmprats]

Hi, reviewing Bug Toolkit an Release Notes about ASA 8.3 version, it looks it has too many bugs and open caveats (failover reloads, webvpn problems).

This is the reason i'm afraid to leave my stable 8.2 (I  like 8.3 because it would not need another license for botnet failover peer).

Any good experiencies with transition to 8.3 with a webvpn, failover and botnet configuration?

Thanks

[Federico Coto Fajardo]

Hi,

In 8.3 there are bugs just as in any code.

If you're running 8.2 and happy with it, there's no reason to go to 8.3 anytime soon (unless you need a feature of 8.3 or having problems with 8.2).

Also, there's 8.4 out already.

Can check the release notes:

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html

Federico.

[jmprats]

I'm just wondering about upgrading because I want to use the Botnet Traffic Filter, so in 8.2 I would need two licenses (one for the failover pair) and in 8.3 I only need one license.

Moreover, because of the last security advisory (http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml), if I upgrade, I have to use an interim version. So, I'm not sure if waiting to the next ED version before upgrading or if it is safe upgrade.

8.4? It looks for another hardware platform  (5585-X), isn't it?

[padatta]

Version 8.4 is supported on all ASA platforms. Please check the memory requirements before considering an upgrade.

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html#wp321918

Paps

[jmprats]

OK, but why so many versions? 8.2, 8.3, 8.4? what are the main differences between them?

are the new features in 8.3 included in 8.4?

if the answer is yes, what sense does 8.3?

if the answer is no, the new features in 8.4 are in relation to which version?

Thanks

[padatta]

Q. OK, but why so many versions? 8.2, 8.3, 8.4? what are the main differences between them?

A. Each version includes new features and major bug fixes.

This link contains release notes to all versions.

http://www.cisco.com/en/US/partner/products/ps6120/prod_release_notes_list.html

Q. Are the new features in 8.3 included in 8.4?

A. Yes.

Q. If the answer is yes, what sense does 8.3?

New features were required, e.g. etherchannel, bridge-group, etc. Hence new version, 8.4.

Q If the answer is no, the new features in 8.4 are in relation to which version?

A. N/A.

Paps

[jmprats]

OK, in my case, in this moment i'm only interested in one new feature of 8.3: "Non identical failover license" to buy Botnet license

But if 8.3 is include in 8.4 is better going directly to 8.4? Whis version is supposed I have to chose?

Thanks

[Pavel Pokorny]

Hi,

I'm almost in same situation. Here is what I've found.

If you have 8.0.x or 8.2.x then you have to go to 8.3 a than to 8.4 (can't find link right now, but I've seen this few days ago).

At this moment I think about upgrade on 8.3.2, but number of bugs, and release notes for last 2 Interim tels me to wait.

Because, Cisco at this upgrade didn't make very good job:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCti36048

I think this shouldn't happen.

So, I'm waiting for 8.3.3 and then I will make some test before putting this in production environment.

8.4.x is out of discussion, because it brings new features, bug when I look in 8.3 I'm worried enough.

http://www.networkstraining.com/new-cisco-asa-version-8-4-introduced/

HTH

Pavel

[jmprats]

OK, I'm going to wait to more stable version too. But i don't see why to choose 8.3, if 8.4 is newer and includes 8.3. Do you find your link?

[padatta]

Well, it would be advisable to go to the latest version 8.4. This has additional features along with the what you're looking for.

Check "How Failover Licenses Combine".

http://www.cisco.com/en/US/partner/docs/security/asa/asa84/configuration/guide/intro_license.html#wp1353724

Paps