AIP-SSM Upgrade Procedure

Answered Question
Apr 6th, 2010

Hi There,

I know that there is a existing thread with the same subject but it doesn't answer a question that I have.

During the upgrade process, does the sensor (AIP SSM module) only reboot or will the whole ASA reboot as well.

If the sensor reboots, the traffic will passthrough if that's the way its configured. If the ASA reboots then there will be some disruption in the production environment. Hence my query.

Thanks in advance for the advise.

cheers

Trevor

I have this problem too.
0 votes
Correct Answer by Jennifer Halim about 6 years 8 months ago

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jennifer Halim Tue, 04/06/2010 - 23:33

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

trevorjeremiahlee Tue, 04/06/2010 - 23:36

Hi,

yup. that certainly answers my question.

Thank a lot for the speedy reply. Really appreciate it.

This is the first time that I am using this forum and i can guarantee that it won't be the last.

Thanks a lot!!

cheers,

Trevor

Actions

This Discussion