I know that there is a existing thread with the same subject but it doesn't answer a question that I have.
During the upgrade process, does the sensor (AIP SSM module) only reboot or will the whole ASA reboot as well.
If the sensor reboots, the traffic will passthrough if that's the way its configured. If the ASA reboots then there will be some disruption in the production environment. Hence my query.
Thanks in advance for the advise.
When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.
If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.
Hope that answers your question.