cisco asa upgrade

[christianstp1]

I know you should be able to upgrade a Cisco ASA in an HA pair with zero downtime. But, if the firewall is running bgp or ospf. Is the an outage during failover?

Thanks

[Marvin Rhoads · Accepted solution]

As long as you have stateful failover configured the dynamic routing protocols will have their RIB table synchronized on the Standby unit and there will be no interruption of service due to routing reconvergence.

The timer on the newly Active (former Standby) unit will begin at the time of failover and the epoch number will be updated accordingly.

Reference:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/ha-failover.html#ID-2107-000000fb

[christianstp1]

Thank you!

[Marvin Rhoads]

You're welcome.

Please mark your question as answered if it has been.