Firepower Re-image in Active/Standby ASA

[NETAD]

Hello, can you verify the steps for re-imaging the firepower modules on ASA in active/standby?

There's no worries for being without the IPS for couple hours so I'm planning on doing the following:

on the primary:

1-Copy the boot image to  flash

2-shutdown and uninstall the SFR module

3-sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.2.2-3.img

4-sw-module module sfr recover boot 

5-session sfr console

6-Configure network information and ftp the .pkg file

7-system install ftp://cisco:cisco@192.168.2.14/asasfr-sys-6.2.2-81.pkg

8-Add to FMC

9-failover and re-do all the steps above

10-failback

Thanks

[yogdhanu · Accepted solution]

Hi There,

All of the steps looks good assuming the primary ASA would be standby at that time.

Once its finished, you would be failing back to primary (active) and do same steps on the secondary (now standby) ASA.

Hope it helps,

Yogesh