active/standby ASA firewall upgrade

[brian08872]

We have an active/standby ASA pair. We're in the process of upgrading from 9.12.4(13) to 9.12.4(37). I plan to follow the recommend process of upgrading the standby firewall first and then making it the primary firewall. If after updating the standby firewall and making it the primary if we had issues could we simply fall back to the another firewall assuming we haven't updated it yet?

[Rob Ingram · Accepted solution]

@brian08872 yes assuming you've not upgrade the other ASA. Here is the ASA upgrade guide, follow the steps and you should be ok.

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html

[brian08872]

Thanks, Rob. Just making sure I understood it correctly before I upgrade our firewalls.