topic AIP-SSM Upgrade Procedure in Network Security

AIP-SSM Upgrade Procedure

trevorjeremiahlee — Sun, 10 Mar 2019 11:57:02 GMT

Hi There,

I know that there is a existing thread with the same subject but it doesn't answer a question that I have.

During the upgrade process, does the sensor (AIP SSM module) only reboot or will the whole ASA reboot as well.

If the sensor reboots, the traffic will passthrough if that's the way its configured. If the ASA reboots then there will be some disruption in the production environment. Hence my query.

Thanks in advance for the advise.

cheers

Trevor

Re: AIP-SSM Upgrade Procedure

Jennifer Halim — Wed, 07 Apr 2010 06:33:20 GMT

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

Re: AIP-SSM Upgrade Procedure

trevorjeremiahlee — Wed, 07 Apr 2010 06:36:07 GMT

Hi,

yup. that certainly answers my question.

Thank a lot for the speedy reply. Really appreciate it.

This is the first time that I am using this forum and i can guarantee that it won't be the last.

Thanks a lot!!

cheers,

Trevor