We currently run a pair of ASA5555x's in FO for our prod perimeter protection.
I have bought all of the required licenses and hard drives to upgrade the firewalls to run the Firepower services.
Both firewalls currently run the Cisco IPS module.
Hoping someone can provide me an upgrade gameplan to get this done. Is this upgrade something I can schedule with TAC ?
I have a maint window end of this month to get it done, where I can live without both firewalls if needed..
Both firewalls currently running 9.1(2), pretty sure I have to get to at least 9.3(2) for the firepower upgrade.
A few questions
- Should I break the FO pair before hand and upgrade the inactive 5555x first ?
- Do I need to uninstall the current IPS modules in both firewalls first ? Whats the best way to do this ?
- Harddrive installation ( 2 each) are hot swappable right ?
Any help or advice would be appreciated.
cheers
Dave