Cisco PIX /ASA upgradtion to 7.2(3) OS version

mirzaakberali · ‎12-02-2008

Hi ,

I want to upgrade my following Firewalls.

Site1 :

Cisco PIX from 6.3(4) to 7.2(3){Redundant Hardware available)

Site2: Cisco ASA from 7.2(1) to 7.2(3)

with Redundant hardware available.

My Question : While doing this OS Upgrade activity Do we need Down time.My Failover is prefectly working fine when we shut down one device , other device is coming up with complete Auto failure.

Please suggest - Do i need any down time for this activity.

Mo'ath Al Rawashdeh · ‎12-02-2008

Hi,

Since your firewalls come with a failover peer, yes you can upgrade their IOS with zero downtime.

Please see "Performing Zero Downtime Upgrades for Failover Pairs" section in the link below:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mswlicfg.html

Cheers

mirzaakberali · ‎12-02-2008

Hi,

Can i directly upgrade from 6.2 to 7.2 version.

Thanks

Mo'ath Al Rawashdeh · ‎12-02-2008

hi,

If you aim to upgrade with zero downtime, i'm afraid no you can't.

Please have a look at "Table 42-1 Zero-Downtime Upgrade Support" in the document that i've already sent to you.

Cheers,