topic ASA failover pair software upgrade question in Network Security

ASA failover pair software upgrade question

cmazur — Tue, 12 Mar 2019 02:19:00 GMT

I have been upgrading failover pairs for quite some time now with no problems, knock on wood.

I have never had a problem, just wondering if I go by the book and load the new code on both

boxes, change the boot statement, go to the primary box and enter the "failover reload-standby" command

and then the "no failover active" statement to make the standby active. If data is not passing on the upgraded box, can I just failover

"no falover active" back to the original box without any issues ?

ASA failover pair software upgrade question

Marvin Rhoads — Tue, 30 Jul 2013 18:59:15 GMT

That's correct.

The most common issues are going from 7.x to 8.x (syntax changes) and pre-8.3 to post-8.3 (more memory required, big NAT change and others) - all of which are covered in release notes, upgrade guides, documents here etc.

Otherwise that procedure is pretty much the same up through the latest ASA software version (9.1(2) as of right now).

Of course if you have multiple contexts or a cluster, some other caveats apply.