topic Yes, that's the process. I've in Network Security

ASA Upgrade (Active-Standby) Procedure

CODNetadmin — Fri, 21 Feb 2020 13:47:31 GMT

Hi All,

Just want to verify if our planned upgrade of ASA will not cause any trouble during the procedure.

Hardware: ASA5525-X

Existing IOS: 9.1.2

Upgrade to: 9.4.2(11)

Setup: Active Standby

We plan to upgrade the standby first, after this, Is the Standby still going to take over after we force a failover to it so that we can then upgrade the Primary Firewall.

Many thanks!

Yes, that's the process. I've

Marvin Rhoads — Tue, 12 Apr 2016 13:59:15 GMT

Yes, that's the process. I've done it many times it it works perfectly when you follow the documented procedure.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111867-asa-failover-upgrade.html#actstand

Thanks Marvin! This is very

CODNetadmin — Wed, 13 Apr 2016 01:40:31 GMT

Thanks Marvin! This is very helpful.

Just a follow up question

CODNetadmin — Wed, 13 Apr 2016 03:33:35 GMT

Just a follow up question Marvin, does that mean that when i upgraded the Standby and I switchover to the upgraded standby, is it going to be a seamless failover (sessions maintained)? Or will it have a quick downtime due to the sessions dropped.

Thanks!

If you do not have stateful

Marvin Rhoads — Wed, 13 Apr 2016 10:43:19 GMT

If you do not have stateful failover configured, individual TCP connections will have to be re-established. If a given application is sensitive to that, a small impact may be noticed. Most end user traffic (web browsing, email etc) generally recovers seamlessly to such an interruption. With stateful failover even that small interruption does not happen.

Thanks so much, Marvin!

Ve Con — Fri, 17 Feb 2017 15:11:27 GMT

Thanks so much, Marvin!