how to do graceful failover on ASA

[bwindle]

I have a pair of ASA firewalls running in active/standby config. What is the Cisco recommended way to do a gracefully fail over to the standby unit (for example, when doing software upgrades, etc). Rebooting the primary is my current method, just checking if there is a 'better' way.

[srue]

if you're logged into the active firewall and you want to failover to the standby, enter:

no failover active

if you're logged into the standby firewall, and you want it to become active, enter:

failover active

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#Fofa