Cisco ASA Failover Firmware Update


I need to upgrade the ads and ASDM on two firewalls which are setup as failover, are there any decent guides on this process?
Ian TaylorIT Infrastructure Architect .:|:.:|:.Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

There sure is:
Zero downtime upgrade
Ian TaylorIT Infrastructure Architect .:|:.:|:.Author Commented:
Thanks for that, thats what I was looking for.

Just another question, we do have a few 5510 ASA firewalls with the latest version 9.1.7 which I believe is the latest I can get for the 5510 - at what stage do you consider replacing firewalls when no more updates are available?
They will probably keep patching the 5510 for a while still, but no new features are added. I would be looking at a replacement right now. ASA5508 probably fits the bill, if you haven't outgrown the 5510.
Pete LongTechnical ConsultantCommented:
Here's my walkthrough

Cisco ASA 5500 Active/Standby – Zero Downtime Upgrade

5510 was declared end of life in 2013, purchasable support is available till December 2017, and support will officially end in Dec 2018 REF:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ian TaylorIT Infrastructure Architect .:|:.:|:.Author Commented:

I came across a strange problem when carrying out the upgrade, after upgrading the standby to ASA 9.1 (2) and ASDM 7.6 - it came back up fine I then failed over to the standby (which I just upgraded) I then noticed on the firewall which was the active was complaining about IPS version was different - I thought okay I upgraded the active to the same as the standby  the the same versions but the failover option on the active reported as disabled.

So atm everything is going via the standby

Any ideas
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.