How to upgrade PIX 7.x without downtime

[jong_r0602]

Hi Guys,

Please enlighten me how to do a "zero downtime upgrade" without rebooting my machine. Is there any other command that i need to issue other than "reload"?

Please help me.

Thanks,

Jong

[noran01 · Accepted solution]

There is no way to do this unless you have a fail-over unit configured. The downtime is very minimal when you reload (usually ~2 mins)

[srue]

like the previous poster said, you need a failover unit.

if you don't have one, and your company/business requires zero downtime (or something close), you really should invest in a second identical ASA device.

[jong_r0602]

Thanks guys,

Yes i have a failover PIX but i thought that i can do a zero downtime without rebooting or without terminating my VPN tunnel's so now i now.

Thanks alot,

Jong

[darren.perry · Accepted solution]

To failover from the Primary PIX to the Secondary PIX without your sessions dropping, log onto the Secondary PIX and issue the command 'failover active'. If you do this via telnet your session will drop and you will need to log back in again.

[jong_r0602]

Thanks for your tip Darren,appreciate it! Problem resolved...

- jong