Cisco ASA-5520 NAT rules gone after software upgrade

SvenIA
SvenIA used Ask the Experts™
on
Hi Experts,

After a software/firmware upgrade of my ASA5520 (8.25 to 8.43) Firewall, all my NAT rules, ACL's and Object Groups are gone. I red on the internet that something could go wrong with the NAT rules only, but I didn't expect that eveything would be gone.

Of course i created a backup of the configuration before the update, but I can't restore it on the new firmware version.

Is there a solution or workaround for this problem? Or do i have to reconfigure the ASA?

~Sven~
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2011
Commented:
Unfortunately, you will have to reconfigure the ASA.

Here is a little help

https://supportforums.cisco.com/docs/DOC-9129

Author

Commented:
Is it standard that everything is gone? Or does it work in some cases?

I have to perform another upgrade tomorrow.
Top Expert 2011

Commented:
No, NAT syntax in pre 8.3 and 8.3 and later is different, so you have to configure NAT from scratch
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Is it only NAT? or do I have to reconfigure access lists and object groups also?
I would recommend doing a downgrade to the old 8.2 again. The configuration will automatically get restored as was. See procedure here: http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.html#wp72161

When that is done and you have some breathing room, do a manual conversion of all the NAT rules and access -list beforehand, so you won't get stuck with a nonworking configuration once you do the upgrade again. In my experience the automatic conversion of NAT rules etc works poorly, so I wouldn't recommend relying on it.
It is essential to learn the 8.3 syntax because it is very different that the old way.

Author

Commented:
Thanks for the information!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial