We have ASA used for SSL and IPSEC remote access with shared license, one license server and no backup. We plan to go from 8.2.5 to 8.4.1 It appears i need to go to 8,3.x first is this correct? The other questions is which do we do first, the ASA thats is the license server or the memebers? Do i need to get them all done at the same time or do i have some 'leeway'? What happens while they are code mismatched?
Yes, you can upgrade just one Cisco ASA FW and not the other. Most of us do that, to ensure the new software image code is in good working order, before we proceed to upgrade the other unit. It doesn't matter, which unit you upgrade first PRIMARY or SECONDARY. Just make sure, which ever unit you upgrade, because the ACTIVE unit.
However, both the Cisco FW MUST share the same major train. This means FW1 v8.2.5, and FW2 v8.2.1, this is fine because the major train is 8.2 but NOT FW1 v8.2.5, and FW2 v8.0.4. Even though I have tried this, but you'll bound to have issues with your ACTIVE/STANDBY failover.
P/S: If you think this comment is useful, please do rate them nicely, and select "This Question is ANSWERED"
Ramraj Sivagnanam Sivajanam
Technical Specialist/Service Delivery Manager – Managed Service Department
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...