Upgrading ASA from version 7.x to 8.x

[mudassar.khan]

Hi All,

I would appreciate if someone can comments, if they have any experience or came across with any issues regarding NATing or ACL setup for NAT ranges after upgrading ASA from version 7.2 to 8.3 or later?

At the moment we are planning to upgrade existing firewalls from version 7.2 to 8.4, but we have found that on the version 8.3 and later, Cisco has made some changes in a way NAT is setup and how the source and destination objects used in acl if referring to NAT addresses.

I am sorry if I am not very clear, but I will be thankful if someone can explain the differences and considerations while upgrading the devices or refer some documentation.

Regards,

Mud    

[Julio Carvajal]

Hello Mudassar,

This is a major upgrade ( there are a lot of changes on the NAT and ACL's statements) but I can ensure you that as soon as you understand this new configuration it would be so much easier for you to work with the ASA.

I would recommend you to go from 7.2 to 8.2 and then 8.4.

I am going to provide you some of the best links related to 8.3 changes .

Hope you like them.

https://supportforums.cisco.com/docs/DOC-9129

http://www.fir3net.com/Cisco-ASA/how-to-configure-nat-of-asa-83.html

And for me the best one of them:

https://supportforums.cisco.com/docs/DOC-12690

Regards,

Do rate all the helpful posts!!

Any other question just let me know

Julio

[mudassar.khan]

Hello Julio,

It looks great stuff! I will go through all the links and will let you know if I have any further queries.

Regards,

Mudassar