Upgrading an ASA out of the box, I noticed the new version of the ASA code is available (and has been since June it seems). Some of the new features that caught my eye:

Botnet Traffic Filter -  Malware that attempts network activity such as sending private data (passwords, credit card numbers, key strokes, or proprietary data) can be detected by the Botnet Traffic Filter when the malware starts a connection to a known bad IP address. The Botnet Traffic Filter checks incoming and outgoing connections against a dynamic database of known bad domain names and IP addresses, and then logs any suspicious activity. You can also supplement the dynamic database with a static database by entering IP addresses or domain names in a local &quot;blacklist&quot; or &quot;whitelist.&quot;

<!--more-->

SNMPv3 &amp; Encryption - This release provides DES, 3DES, or AES encryption and support for SNMP Version 3, the most secure form of the supported security models. This version allows you to configure authentication characteristics by using the User-based Security Model (USM).

Pretty good stuff-- and unlike ASA 8.1, which was only for the ASA 5580, the 8.2(x) code runs on any 5500 series ASA.