ASA Upgrade 9.8.(4)3 to 9.9.2.52

[InTheJuniverse]

Is this considered a major upgrade or minor?

I need to upgrade my Active / Standby Failover pair with 0 downtime. I will upgrade standby and reboot, when it comes up with 9.9 code, will it break the failover with 9.8(4)3 or stay in failover with error??

I am on Cisco ASA 5516-x

[Karsten Iwen]

You can do this update without any downtime. Failover will not break while updating.

But: Why do you want to do *this* upgrade? 9.9 is only a short supported release, 9.8, 9.10 and 9.12 are the releases with longer support.

If you don`t need newer features, I would use the newer 9.8 interims-releases. If you need the newer features, I would upgrade to 9.10 or even 9.12. Personally, I prefer 9.12. I have the feeling that it is running more smoothly than 9.10.

[Firepowered]

Hello

Thanks for your response.

That's a nice point, I didn't notice. The current version 9.8 has a bug which prevents more than 5-6 users connecting to Anyconnect VPN. (https://community.cisco.com/t5/cisco-bug-discussions/cscvp10132-anyconnect-connections-fail-with-tcp-connection-limit/m-p/3906640/highlight/false#M9735)

TAC suggested me 9.9, I have asked them about 9.10, 9.12.

Thank you very much.

[mkazam001]

This may help.

Regards, mk

https://www.packet6.com/cisco-asa-zero-downtime-upgrade/