ASA

ankit.dhawan · ‎12-07-2016

We have a pair of ASA - 5585 in production environment. It's operating in single mode right now and want to put it in multiple mode so we can create multi-context on them.

Can someone guide us the best approach so we can achieve this with minimum risk to the current traffic?

Ajay Saini · ‎12-13-2016

Hi Ankit,

This can not be done in a running environment. You will need downtime for this activity. The internal structure of the firewall changes and this needs a good amount of planning not only in terms of ASA but also the connected devices. FYI, ASA needs a reload once you enable multiple mode:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/contexts.html

HTH

-

AJ