Zero downtime Upgrade ASA 8.0(4) TO 8.4(7)

[rakeshvelagala]

Hi All,

I checked a few blogs and upgrading ASA 5520 from 8.0(4) to 8.4(7) following below path. I will be upgrading  RAM to 2GB at version 8.2.5. Reason for 8.4.6 is we may get an error message ""No Cfg structure found in downloaded image file" Error Message" if we upgrade directly to 8.4.7.

Please advise if we can perform Zero downtime upgrade if I follow below path and will they still be in HA? Active/standby

8.0.4-->8.2.5 (Active on 8.0.4 and standby 8.2.5)--> Will they be in HA?

8.2.5--->8.4.6(Active on 8.2.5 and standby 8.4.6)--> Will they be in HA?

I believe below one should not be a problem.

8.4.6-->8.4.7(Active on 8.4.6 and standby 8.4.7)--> Will they be in HA?

Thanks in advance.

Regards

[Marius Gunnerud · Accepted solution]

8.0.4-->8.2.5 (Active on 8.0.4 and standby 8.2.5)--> Will they be in HA?

HA will work...as in the units will failover.  But due to changes in configuration syntax you could run into problems with config synchronisation. And could also cause issues in traffic flow if a failover occurs.  So it is best to upgrade the second ASA to the new version ASAP.  It is also the reason cisco recommend using the same Major and Minor software versions.

8.2.5--->8.4.6(Active on 8.2.5 and standby 8.4.6)--> Will they be in HA?

Same as above.

8.4.6-->8.4.7(Active on 8.4.6 and standby 8.4.7)--> Will they be in HA?

This should be fine

--

Please remember to select a correct answer and rate helpful posts