Solved: AIP-SSM Upgrade Procedure

trevorjeremiahlee · ‎04-06-2010

Hi There,

I know that there is a existing thread with the same subject but it doesn't answer a question that I have.

During the upgrade process, does the sensor (AIP SSM module) only reboot or will the whole ASA reboot as well.

If the sensor reboots, the traffic will passthrough if that's the way its configured. If the ASA reboots then there will be some disruption in the production environment. Hence my query.

Thanks in advance for the advise.

cheers

Trevor

Jennifer Halim · ‎04-06-2010

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

View solution in original post

Jennifer Halim · ‎04-06-2010

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

trevorjeremiahlee · ‎04-06-2010

Hi,

yup. that certainly answers my question.

Thank a lot for the speedy reply. Really appreciate it.

This is the first time that I am using this forum and i can guarantee that it won't be the last.

Thanks a lot!!

cheers,

Trevor