How to upgrade the software image on the Adaptive Security Appliance 5500 Series to 7.x in a failover pair

[TCC_2]

Resolution

Complete these steps in order to upgrade the software images:

1. Use the copy tftp: flash: command in order to copy the image to both the firewalls.
   
   
2. Change the boot system and point it to the new image. For example, boot system flash:/asa721-k8.bin.
   
   
3. If you have the Adaptive Security Device Manager (ASDM), copy the new version of ASDM and point the ASDM to the new file. For example, asdm image flash:/asdm521.bin.
   
   
4. Issue the write memory command.
   
   
5. Reload the primary firewall. When it comes back up, this output is displayed:
   
   Hostname(config)#
   
   ************WARNING****WARNING****WARNING********************************
   Mate version 7.1(2) is not identical with ours 7.2(1)
   ************WARNING****WARNING****WARNING*********************************
   
   Beginning configuration replication: Sending to mate.
   
   End Configuration Replication to mate
   
   
6. After the failover is back to normal and the traffic flows through the firewall, issue a reload command on the secondary firewall.
   
   
7. The secondary firewall comes back up and stays as standby ready.

Note: It is highly recommended that you perform the upgrade during a maintenance window as this can cause a few packet drops.

Refer to Cisco ASA 5500 Series Release Notes, Version 7.2(1) before the upgrade of the software image on the ASA.

Refer to Cisco Downloads in order to download the software image.

Refer to TAC Case Collection Case #K01012733 for more information on how to upgrade the ASA image.