Most of my question is already answered but I have to be sure about the capability of the CSM (and the Auto Update Server) about the update of my "Security Devices" (ASA 5500, AIP-SSM, IPS 4200).
(I am talking about the CSM 3.3.1 and 4.0)
With the CSM can I remotely on a large infrastructure update:
- the ASA software : I think yes. What about 2 ASA in active/passive mode?
- the AIP-SSM software?
- the AIP-SSM recovery partition?
- the IPS 4200 software?
- the IPS 4200 recovery partition?
- the IPS signature update file: yes
If one this updates cannot be done by the CSM, it means that I have to do it device by device?
If my CSM server is offline, can I manually download the IPS sig updates and put them on the CSM?
During the software update on these devices, is the configuration saved ?
Thanks in advance!