Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

AIP-SSM Upgrade Procedure

Hi There,

I know that there is a existing thread with the same subject but it doesn't answer a question that I have.

During the upgrade process, does the sensor (AIP SSM module) only reboot or will the whole ASA reboot as well.

If the sensor reboots, the traffic will passthrough if that's the way its configured. If the ASA reboots then there will be some disruption in the production environment. Hence my query.

Thanks in advance for the advise.

cheers

Trevor

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: AIP-SSM Upgrade Procedure

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

2 REPLIES
Cisco Employee

Re: AIP-SSM Upgrade Procedure

When upgrading the AIP-SSM module, only the module will reload. ASA will not reload.

If you configure the ASA policy map to "fail-open", when the AIP-SSM module reloaded, traffic through the ASA will still pass through, and bypass the AIP-SSM module.

Hope that answers your question.

Community Member

Re: AIP-SSM Upgrade Procedure

Hi,

yup. that certainly answers my question.

Thank a lot for the speedy reply. Really appreciate it.

This is the first time that I am using this forum and i can guarantee that it won't be the last.

Thanks a lot!!

cheers,

Trevor

425
Views
0
Helpful
2
Replies
CreatePlease to create content