Recommended ASA software for VPN ?

[johng231]

Hello -

We’re in the process of migrating our legacy VPN concentrators over to a pair of ASA5540s. The VPN connections we use today are L2L, RA, & easy VPN. I don’t want to jump up to 8.3 or higher just yet, due to the differences in the NAT, group-objects and ACL policies.

Would it be recommended to use an 8.2 code as standard for VPN endpoints?

Thanks -

John

[ajay chauhan · Accepted solution]

You can very well use 8.2 .Right 8.3 onwards changes are there the way we configure NAT but its not very complicated to ignore latest version just because of NAT.

Just have a look on the link-http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.html.

You might miss some new aded features but if not using those then its all right to go for 8.2

Thanks

Ajay

[vabruno]

Last year I did what you are trying to do, I migrated from a pair of Cisco 3060 concentrators to a pair of Cisco ASA 5540 firewalls. I went right to 8.3 since I had to manually port the config over anyways. If you don't want to go to 8.3 just go to 8.2x and then upgrade when your ready. I wanted 8.3 because at the same time I migrated clients from IPSec VPN to Anyconnect and wanted some of the features

Sent from Cisco Technical Support iPad App

[Marvin Rhoads]

I'm with vabruno on this. If you're moving onto ASA fresh from a different platform then the current version (8.4(3)) is the way to go. The new syntax will be used going forward and new features - especially advanced remote access (AnyConnect), Identity Firewall, etc  - are all on the newer code.