ASA Firewall Upgrade Procedure - Active/Standby

TAKE THE BACKUP OF BOTH THE FIREWALL BEFORE UPGRADE.
==================================================

1. Login to the console for the standby firewall


2. Upload the ASA image and ADSM imgage to flash from tftpserver


copy tftp://x.x.x.x/asa822-k8.bin flash:/

copy tftp://x.x.x.x/asdm-625-53.bin flash:/


or

copy tftp: disk0:/


3. Change the boot system and asdm image

boot system disk0:/asa822-k8.bin

asdm image disk0:/asdm-625-53.bin


4. save the configs and reboot

wr mem
reload

5. after reload make the standby fw to active

failover active

6. Confirm that all traffic going fine, if yes. Proceed with Upgrading other FW


7. Login to the console for the ASA FIREWALL(which was active before, now sandby)


8. Upload the ASA image and ADSM imgage to flash from tftp server


copy tftp://x.x.x.x/asa822-k8.bin flash:/

copy tftp://x.x.x.x/asdm-625-53.bin flash:/


or

copy tftp: disk0:/


9. Change the boot system and asdm image

boot system disk0:/asa822-k8.bin

asdm image disk0:/asdm-625-53.bin


10. save the configs and reboot

wr mem
reload

11. after reload make the standby fw to active

failover active



12. Confimr that all working fine

13. Issue wr standby from Active firewall


Test Plan
========

Confirm all working fine. Try to login with ASDM as well

Backout plan
============

1. login to firewall

2. conf t

3. boot system disk0:/asa821-k8.bin

4. asdm image disk0:/asdm-621.bin

5. wr mem

6. reload