Due to oversubscription of our ASA remote access box, we need to upgrade from SSP-20s to SSp-60s. Has anyone done this before? I'm trying to work out the best option to minimise downtime, move config and Apex licences, but can't find and upgrade process.
If you're committed to that approach I'd definitely open a TAC case procatively. They can guide you through it in real time step-by-step.
The configuration should be backed up and restored including certificates and and VPN customization files (like clientless portal and xml files). The licenses can be transferred easily assuming you have AnyConnect 4.x license type. If they are 3.x you might have to get your activation-key rehosted by TAC global licensing team.
Thanks. I've tried using TAC, but unfortunately have had no useful information from them, just a lot of confusing and contradictory info. I was hoping someone on the forum had already performed the upgrade and could provide real world experience.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...