Cisco Cisco Security Manager 4.3 Guía De Información
13
Supported Devices and Software Versions for Cisco Security Manager 4.3
OL-26837-01
Supported Software for Security Manager
Supported Software for Security Manager
Security Manager supports the software on the devices that it manages as described in the following
sections:
sections:
•
•
ASA, FWSM, PIX, and IPS Supported Software Versions
The following list describes the minimum supported software versions plus the specific release numbers
that have additional support in Security Manager for devices that run operating systems other than Cisco
IOS Software. You must use a software version that meets at least the minimum. If you use a version that
is not listed, Security Manager will treat it as one of these versions (the most closely-matching version,
which is typically the release number nearest to it but lower). Any features that are unique to the version
you are using are not supported in Security Manager.
that have additional support in Security Manager for devices that run operating systems other than Cisco
IOS Software. You must use a software version that meets at least the minimum. If you use a version that
is not listed, Security Manager will treat it as one of these versions (the most closely-matching version,
which is typically the release number nearest to it but lower). Any features that are unique to the version
you are using are not supported in Security Manager.
•
Cisco ASA-5500 Series Adaptive Security Appliances (ASA)—ASA Software Release 7.0(1-2,
4-8), 7.1(1-2), 7.2(1-5), 8.0(2-3, 5), 8.1(1-2), 8.2(1-3), 8.3(1-2), 8.4(1-4), 8.5(1), 8.6(1).
4-8), 7.1(1-2), 7.2(1-5), 8.0(2-3, 5), 8.1(1-2), 8.2(1-3), 8.3(1-2), 8.4(1-4), 8.5(1), 8.6(1).
The following exceptions apply to ASA software support:
–
If you upgrade a device that you are already managing in Security Manager to 8.3(1) or higher,
you must rediscover the device from the inventory. This is required due to significant policy
changes between the 8.3 release and lower releases. This requirement applies to all device
models, including upgrades of a 5585-X from 8.2(3) to 8.4(4).
you must rediscover the device from the inventory. This is required due to significant policy
changes between the 8.3 release and lower releases. This requirement applies to all device
models, including upgrades of a 5585-X from 8.2(3) to 8.4(4).
This type of inconsistency is not restricted to 8.3(1) alone; it can happen in more than one
scenario where ASA is upgraded from the following OS versions:
scenario where ASA is upgraded from the following OS versions:
—7.x to 8.x
—8.3 and above from any lower version
—8.3.x to 8.4.2 and above
For detailed information on these scenarios, refer to the section titled “Validating a Proposed
Image Update on a Device” in the User Guide for Cisco Security Manager 4.3 at the following
URL:
Image Update on a Device” in the User Guide for Cisco Security Manager 4.3 at the following
URL:
–
Although 8.2(4) is supported in downward compatibility mode as 8.2(3), Security Manager does
support ASA 5585-X models with SSP-10 and SSP-40 running 8.2(4).
support ASA 5585-X models with SSP-10 and SSP-40 running 8.2(4).
–
You cannot use Security Manager to manage SSL VPNs on ASA 7.x.
–
You cannot use Security Manager to manage an ASA 8.3+ device if you enable password
encryption using the password encryption aes command. You must turn off password
encryption before you can add the device to the Security Manager inventory.
encryption using the password encryption aes command. You must turn off password
encryption before you can add the device to the Security Manager inventory.
–
Release 8.5(1) applies to the Catalyst 6500 Series ASA Services Module (ASA-SM) only. The
ASA-SM does not support any type of VPN configuration.
ASA-SM does not support any type of VPN configuration.
–
Release 8.6(1) applies to Cisco ASA 5500-X based Adaptive Security Appliance models only
(except 5585-X Adaptive Security Appliance).
(except 5585-X Adaptive Security Appliance).