07-24-2012 08:16 AM - edited 03-11-2019 04:34 PM
We have ASA used for SSL and IPSEC remote access with shared license, one license server and no backup. We plan to go from 8.2.5 to 8.4.1 It appears i need to go to 8,3.x first is this correct? The other questions is which do we do first, the ASA thats is the license server or the memebers? Do i need to get them all done at the same time or do i have some 'leeway'? What happens while they are code mismatched?
07-25-2012 12:32 AM
Yes you have to go through 8.2 to 8.3 agnd then 8.4 version. What i suggest you is go through the release notes of the OS version which you are referring.
Am not pretty sure about your second query.
Please do rate if the given information helps.
By
Karthik
07-26-2012 07:34 PM
Hi Bro
Yes, you can upgrade just one Cisco ASA FW and not the other. Most of us do that, to ensure the new software image code is in good working order, before we proceed to upgrade the other unit. It doesn't matter, which unit you upgrade first PRIMARY or SECONDARY. Just make sure, which ever unit you upgrade, because the ACTIVE unit.
However, both the Cisco FW MUST share the same major train. This means FW1 v8.2.5, and FW2 v8.2.1, this is fine because the major train is 8.2 but NOT FW1 v8.2.5, and FW2 v8.0.4. Even though I have tried this, but you'll bound to have issues with your ACTIVE/STANDBY failover.
P/S: If you think this comment is useful, please do rate them nicely, and select "This Question is ANSWERED"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide