WSAs managed by SMA / Upgrade Procedure

[spacemeb]

Hello guys,

I am thinking to upgrade our WSAs from 12.5.1-043 to 14.0.1-053. First, we are going to upgrade our SMA to 14.1.0-227.

I need a little help with the below:

Since our configuration manager is on 12.5, how should I change it? what steps I need to follow? 

To be honest, I don't feel comfortable/familiar with SMA, so please let me know what to do in order to have a successful upgrade.

[balaji.bandi]

yes first you need to upgrade SMA and check the compatability of WSA, at the same time of 14.X is not compatable with WSA 12.X version, then you need uplift WSA 14.X  so SMA can manage WSA.

Upgrade need to done individually : SMA own upgrade, WSA own Upgrade.

Make sure you take the backup (not masked). (both SMA and WSA).

Once you upgrade to 14.X config manager changes.

[Ken Stieers]

Per the configuration matrix, you CAN support 12.5.1-043 WSA's https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/SMA-ESA-WSA_Compatibility.pdf

[spacemeb]

So, it will change configuration manager automatically? 

[Ken Stieers]

No.
Upgrade the SMA. On the Web tab, under Utilities/Configuration Mangers and initialize the version you're going to. Then under Utilities/Security Services Display, click the Edit Display Settings... button at the bottom and then enable the version and make sure the config matches.
Upgrade the WSAs
Then back on the SMA under Management Appliance/Security Appliances, go into each WSA and make sure its assigned to the correct configuration master.

[Ken Stieers · Accepted solution]

Upgrade the SMA first.
Initialize the 14.0 configuration master from your 12.5 configuration master.
Upgrade your WSAs.
Per the configuration matrix, you CAN support 12.5.1-043 WSA's with no issues. Page 75 in this doc:
https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/SMA-ESA-WSA_Compatibility.pdf