My customer has a PIX 515 HA, version unknwon. We need to do password recovery. Am I right in saying that the following sequence will work?
Reboot standby, determine SW version from console
Verify standby is operational after reboot
Download correct utility
Perform recovery procedure on the active box
Once active box is recovered, verify config sync to standby
If I understand PIX HA correctly, I think the standby box should take over during the recovery procedure. Am I missing anything?
I would fail it over manually before doing the recovery to make sure the standby comes online as active and you can verify it. Otherwise, I don't see a problem with the logic.....