I have a pair of Active/Standby ASA need to upgrade from 9.1.5 to 9.1.7.
I am going to upgrade the Standby unit first and then force it to become active.
In case of any unpredictable problem on version 9.1.7.
I want to wait for a week before upgrading another the another ASA.
My concern is this pair of ASA can't perform hot standby due to the version difference.
Can CISCO ASA hot standby if their firmware version is different?
2.6k Views Asked by Sean Out At
1
There are 1 best solutions below
Related Questions in CISCO
- Telnet client for Cisco switch using Android java apps
- Cisco same vlan user and server (Packet tracer)
- Paramiko session times out, but i need to execute a lot of commands
- Cisco AXL updatePhone using python3, suds, SOAP Requests
- Time Cisco Router reload not always mentioned
- NAT on Cisco Router between 2 external IP addresses
- how to read an xml soap response with multiple namespaces and with same name for multiple child nodes
- Bash script to audit Cisco configuration
- Ironport rejecting emails
- buffer value is not getting printed
- Security warning: Untrusted VPN Server Certificate
- Parse Simple JSON with VB.NET
- How to stop Cisco Services Application objects from stacking
- Using TelnetLib with a Cisco Wireless Controller
- Http Header Throws Exception C# HttpResponseMessage
Related Questions in ASA
- OpenNMS Syslogd Configuration
- MAC OS X VPN client / Certificates / Cisco ASA series
- Can't ping through IPsec
- Paramiko not receiving all data from Channel
- Not getting expected throughput on Cisco ASA 5506-X
- Unsupported parameters for (cisco.asa.asa_command) module: context, passwords found in provider
- Visual Studio 2017 - stream analytics projects local run fails
- Cisco ASA DAP rule and LDAP.memberOf attribute is not recognized
- RPC & TCP Behavior
- Can CISCO ASA hot standby if their firmware version is different?
- Sybase/Sap sql: converting from cp1251 to utf8
- ASA 5505 + cannot login to ASDM
- Default URL of Cisco ASA 5505 not displaying login page
- Regex Pattern for filtering multiline data for REST API
- get content in between a matched pattern and next matched pattern using python
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
This is what cisco saying you don't need to maintain same version while upgrade, failover works regardless of your minor version number, I believe you are good to go:
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111867-asa-failover-upgrade.html
Perform Zero-Downtime Upgrades for Failover Pairs
The two units in a failover configuration should have the same major (first number) and minor (second number) software version. However, you do not need to maintain version parity on the units during the upgrade process; you can have different versions on the software running on each unit and still maintain failover support. In order to ensure long-term compatibility and stability, Cisco recommends that you upgrade both units to the same version as soon as possible.