I have a pair of Active/Standby ASA need to upgrade from 9.1.5 to 9.1.7.
I am going to upgrade the Standby unit first and then force it to become active.
In case of any unpredictable problem on version 9.1.7.
I want to wait for a week before upgrading another the another ASA.
My concern is this pair of ASA can't perform hot standby due to the version difference.
Can CISCO ASA hot standby if their firmware version is different?
2.6k Views Asked by Sean Out At
1
There are 1 best solutions below
Related Questions in CISCO
- Network System - Cisco Packet Tracer
- CISCO refuses to turn off spanning tree for specific vlans
- Connect ssh to cisco switch with ansible
- Want to check in a Cisco IOS config if the VTYs have SSH only with ciscoconfparse2
- How to set up URL redirection on D-Link router for specific domain?
- Logout Automation in Cisco ACI
- What Cisco unity connection messaging system does?
- net_connect.find_prompt() doesn't print the prompt, gives weird error in netmiko
- How to use api forCisco Secure Endpoint (formerly AMP for Endpoints)
- Burn Bootstrapper - Preventing Modify/Uninstall page from appearing after installation
- Different numbers coming from Cloudflare, Smartlook, and Vercel analytics
- How to resolve "[Errno 11001] getaddrinfo failed" when using Paramiko to change Cisco passwords?
- RStudio Running Unbearably Slow/Unresponsive when Connected to Cisco AnyConnect VPN
- Loading screen using tqdm library
- Trex Traffic generator in AWS
Related Questions in ASA
- Unable to log into serial terminal using Plink and Python pexpect module
- regarding Changing CiscoAny connect Client GUI Text and message
- How do I check of an account had opted-in to an ASA using the python algosdk?
- Sybase/Sap sql: converting from cp1251 to utf8
- Not getting expected throughput on Cisco ASA 5506-X
- Paramiko not receiving all data from Channel
- How to output a "show" command result from Cisco ASA in playbook?
- Ansible + Jinja2 Loop - Dict object has no attribute
- Cisco ASA DAP rule and LDAP.memberOf attribute is not recognized
- Cisco ASA Concurrent VPN Users - Timechart in KQL / Azure Sentinel
- Can't ping through IPsec
- Unsupported parameters for (cisco.asa.asa_command) module: context, passwords found in provider
- Ho to send bulk commands to cisco ASA with ssh
- ASA configuration using packet tracer
- sshpass stops parsing piped input after 70 lines
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
This is what cisco saying you don't need to maintain same version while upgrade, failover works regardless of your minor version number, I believe you are good to go:
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111867-asa-failover-upgrade.html
Perform Zero-Downtime Upgrades for Failover Pairs
The two units in a failover configuration should have the same major (first number) and minor (second number) software version. However, you do not need to maintain version parity on the units during the upgrade process; you can have different versions on the software running on each unit and still maintain failover support. In order to ensure long-term compatibility and stability, Cisco recommends that you upgrade both units to the same version as soon as possible.