cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
486
Views
0
Helpful
3
Replies

ASA Upgrade Train 7.2.3 to 8.0.4

jasonmcl
Level 1
Level 1

Can this be done with zero downtime procedure? Or do I need to go to 7.2.4 then 8.0.2 then 8.0.4. Thanks.

3 Replies 3

JORGE RODRIGUEZ
Level 10
Level 10

This is new released code, probably released this week, your best bet to be sure is ask TAC, however, generally there is a zero downtime upgrade gideline.

This is the zero downtime upgrade guidelines

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mswlicfg.html#wp1053398

There is still and opened CAVEATS related to failover upgrade but it may not apply to you.

ISAKMP SA are not replicated when the standby unit is running 8.0.3.12 and the active unit 7.2.3.x. This is preventing a 0 downtime upgrade

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCso95135

Read the release notes 8.0.4

http://www.cisco.com/en/US/docs/security/asa/asa80/release/notes/arn804n.html

Jorge Rodriguez

Thanks for the quick reply. I have of course already looked at the upgrade guidelines you have linked in your reply. It seem reasonable based on those guidelines that since we are going from last minor (7.2.x) to the next major (8.0.x) that the process should work. Whis is unclear to me is if the maint. relese ( x.x.3 or x.x.4 etc) is also a dependancy. I didnt see that clarified anywhere on here. Has anyone asked this already and gotten an answer from TAC?

I posed this precise question to our Cisco support people. Their response was "consensus of opinion is possibly but no one can guarantee...not proven until tested in your particular environment."

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: