Normally, the IOS upgrade will leave your config intact.
The hard part will be implementing the firewall rules.
I suggest you first deploy them on secondary HSRP router and test them with two computers, one on each side ( both pointing to the physical IP of the secondary router).
When the rules are ready, copy them to the primary.
Please rate if this helped.
Cheers,
Daniel