Tuesday, October 14, 2014

Cisco ASA: Downgrade From 9.0(3) To 8.4(5)

While at a customer site late night, we were going to do an upgrade on the cluster of ASAs from 8.4(5) to 9.0(3).  However, because we interrupted a project implementation that we didnt know about, we had to revert back.  Mainly because the upgrade interrupted their anyconnect VPN access and brought it down completely.  So after some troubleshooting, I found that the webvpn config got taken out when either when I reverted back to 8.4(5) or when the upgrade was done.  Im not sure when it was, but I do know that when we were back to the original 8.4(5) code, the webvpn config was missing.  Interesting for sure, but that was an experience to be aware of for me.


  1. Interesting. I too have seen some funny stuff over the years when upgrading PIX's and ASA's. It might say Cisco on the outside, but you can sure tell it's not IOS on the inside.


Your comment will be reviewed for approval. Thank you for submitting your comments.