Cisco ASA IOS Upgrade

Posted on 2009-02-18
Last Modified: 2012-05-06
I have confusion on how the licensing work for the Cisco IOS
I would like to upgrade our Cisco ASAs 5505 firmware from 7.x to 8.x  (total 10 ASAs)
Do I need to buy / pay cisco for this firmware?
I have the cd from one of our ASA, and just need to load them on all the ASA and have no problem with deployment at all.

Is it legal to do this ?

My understanding is that, we only need to buy license for VPN peers and remote access VPN.

any suggestion will be much appreciated..

Question by:ricks_v
    LVL 6

    Author Comment

    Will be great if someone can provide with approx price details for the license or IOS.
    LVL 2

    Accepted Solution

    It is my understanding that if you have an active support (Smartnet) agreement with Cisco for each device, you are entitled to the software upgrades free of charge.
    If you only have Smartnet on one device and install the image on multiple devices then you are violating the license agreement.  

    Smartnet typically runs at 20% - 25% of the device cost.  I would also say that Cisco Smartnet is one of the best maintenance programs around.
    LVL 9

    Assisted Solution

    Indeed if you have an active Smartnet contract on you Cisco device you can upgrade to newer version within the feature set you bought the device with and as stated only that or those devices you have a contract for. As for ASA there is only one type of software so if you have an Contract for your device you can obtain the software here: (Requires CCO login with valid contract attached)
    LVL 9

    Expert Comment

    As for VPN you have 10 IPSec VPN peers with any licens. However if you want to use SSL VPN you need to purchase a security licens for the ASA.
    LVL 6

    Author Comment

    I do not have any smartnet agreement :(
    I guess I cannot just upgrade our Cisco ASAs or even all our Cisco switches, routers, APs, etc..

    thanks for the replies
    LVL 6

    Author Closing Comment

    thanks guys

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now