Use Cisco's Output Interpreter of "show version" to look for obvious. Org has a policy against running anything other than GD. Organization has a policy to only run tested/QA'd versions and new equipment came with a more recent release. This is the necessity question that also touches on soft costs such as the time and resources to accomplish the upgrades measured against the weight given to each of the factors such as vulnerabilities.īe sure to subscribe to multiple vulnerability announcement sites such as Cisco PSIRT (Product Security Incident Response Team) and the US Cert (Computer Emergency Readiness Team). Consideration is given to the role of the device, the redundancy surrounding it, and the impact of the upgrade itself by the downtime incurred or by the possibility of having config feature behavior changes or different defaults when going between major versions. Matching versions on more recently deployed and similar hardwareĪ device that is very critical to the infrastructure may not be as aggressively upgraded as one that is less critical. Migrating away from retired release trains. Attaining new features not currently available- new cards/modules have a "first supported in" IOS version which could be higher than what you have running. 
Vulnerabilities, vulnerabilities, vulnerabilities!. 
In order of preference/priority, our company tends to upgrade based on these factors:
0 kommentar(er)
