Workflow

This is the process by which Security Cloud Control Firewall Management upgrades the active/standby pair of ASAs:

Procedure

Step 1

Security Cloud Control Firewall Management downloads the ASA and ASDM images to both ASAs.

Note

Users have the choice of downloading ASA and ASDM images but not upgrading immediately. If the ASA and ASDM images were downloaded previously, Security Cloud Control Firewall Management will not download them again; Security Cloud Control Firewall Management continues the upgrade workflow with the next step.

Step 2

Security Cloud Control Firewall Management upgrades the secondary ASA first.

Step 3

Once the upgrade is complete and the secondary ASA returns to the "Standby-Ready" state, Security Cloud Control Firewall Management initiates a failover so that the secondary ASA becomes the active ASA.

Step 4

Security Cloud Control Firewall Management upgrades the primary ASA, which is now the current standby ASA.

Step 5

Once the primary ASA returns to the "Standby-Ready" state, Security Cloud Control Firewall Management initiates a failover so that the primary ASA becomes the active ASA.

Warning

Upgrading devices that have self-signed certificates may experience issues; see New Certificate Detected for more information.