Cisco Cisco Prime Security Manager 9.0
14
Release Notes for ASA CX and Cisco Prime Security Manager 9.3
OL-32019-01
Installation Notes
Upgrading HA Devices from 9.1(x) to 9.3(x)
Note
If you upgrade to 9.3 from a 9.2 release, this section does not apply to you.
Release 9.2(1.1) introduced management of high availability (HA) devices. In 9.1, PRSM did not know
if an ASA, and subsequently, its CX device, was configured as part of an active/standby pair with another
device. Thus, to manage the CXs, you would import them both to PRSM separately.
if an ASA, and subsequently, its CX device, was configured as part of an active/standby pair with another
device. Thus, to manage the CXs, you would import them both to PRSM separately.
Because PRSM 9.3, like 9.2, treats HA devices as a unit, you should first remove these devices from the
PRSM inventory prior to upgrading to 9.3 directly from a 9.1(x) build. (This is not necessary if you
upgrade from 9.2(x).) You can them add them back to the inventory. Following are the general steps.
PRSM inventory prior to upgrading to 9.3 directly from a 9.1(x) build. (This is not necessary if you
upgrade from 9.2(x).) You can them add them back to the inventory. Following are the general steps.
Step 1
Delete both ASA devices from the 9.1(x) PRSM inventory.
Log into the CX web interface on both CX devices to verify they were put into Single Device mode.
Step 2
Upgrade the PRSM server using the 9.3 system software upgrade package.
Step 3
Upgrade the ASAs to the minimum required ASA Software release, 9.1(5).
Step 4
Upgrade the CX devices using the 9.3 system software upgrade package.
Step 5
Go to the inventory page in PRSM (select Configurations > Policies/Settings, go to Repository view,
and select the Overview tab).
and select the Overview tab).
Click the Add Device link, and specify the information for the active ASA and follow the wizard
prompts. PRSM will detect the HA configuration and add both ASA and CX devices as a single HA unit.
prompts. PRSM will detect the HA configuration and add both ASA and CX devices as a single HA unit.
Installation Instructions
For information on installing the ASA CX Security Services Processor, see:
•
Quick Start Guide—Cisco ASA CX Module Quick Start Guide
•
Hardware Installation (5585-X)—Cisco ASA 5585-X Hardware Installation Guide
•
Hardware Installation (5500-X)—Cisco ASA 5500-X Hardware Installation Guide
•
RCSI (5585-X)—Regulatory Compliance and Safety Information for the Cisco ASA 5585-X
Adaptive Security Appliance
Adaptive Security Appliance
•
RCSI (5500-X)—Regulatory Compliance and Safety Information for the Cisco ASA 5500-X Series
Appliances and the Intrusion Prevention System 4300 Series Appliances
Appliances and the Intrusion Prevention System 4300 Series Appliances