Downtime

Hello

I want to upgrade the version of the OS on the following devices, please advice the downtime of the operating system places a gradation.

ASA 5550

Currently running:

Cisco Adaptive Security Appliance Software Version 8.4 (5)

Requirements:

Cisco Adaptive Security Appliance Software Version 9.1 2

4255 IPS:

Currently running:

Cisco Intrusion Prevention System, Version 8,0000 E4

Requirements:

Cisco Intrusion Prevention System, Version 9,0000 E4

Kind regards

Falcao

Two upgrades require a restart of the device, which means that you have to calculate with a timeout of a few minutes (which also depends on the complexity of your config).

For upgrades like these I usually announce a downtime of 30 Minutes, knowing it's done generally in less then 10 Minutes (including basic tests).

These devices operate without no HA? Then you probably have a maintenance window that is large enough...

And I would upgrade the ASA directly to the new version of 9.1 (6) and not tho 9.1 2 very old. The software for the IPS is 7.1 (10) E4.

Tags: Cisco Security

Similar Questions

  • missing metric collections officer for the duration of downtime

    Hello

    We had to stop the FMS, and after we grew up, we discovered that metric collections officer for the duration of the downtime was missing and not populated dashboard FMS,

    We have a hypothesis, that when FMS is down or not accessible by FGLAM on the monitored hosts, that FGLAM still collects its measures and it will grow to FMS when it is returned to the online state.

    The questions are, is it true the assumption? And if it is true, how restore us these metrics data for the mentioned period?

    Thank you

    Hi Waseem-

    fglam there a store and the capacity before. The amount of agent Manager data stores is controlled

    with some configuration settings. You can read about some details here:

    http://eDOCS.quest.com/Foglight/555/doc/wwhelp/wwhimpl/common/HTML/frameset.htm?context=field&file=StoreAndForward-field/StoreAndForwardProcessing.17.4.php&single=true

    HTH

    Robert Statsinger

  • No downtime if reset you the sensor

    Hi all

    I wonder if I reboot the sensor, no downtime will occur?

    Hi again

    Try to take a look here - it is an example of a config ver 6.0 but is not serious

    http://www.Cisco.com/en/us/docs/security/IPS/6.0/Configuration/Guide/CLI/cliSSM.html#wp1038548

    depends on the policy of the asa you have defined what I say (and - do you have an ASA in HA mode?) - step 7 here appears in the options you have:

    Step 1 Connect to the Adaptive security apparatus.

    Step 2 Setting input mode.

    asa# configure terminal 

    Step 3 Create an IP access list.

    asa(config)# access-list IPS permit ip any any 

    Step 4 Set of traffic IPS class.

    asa(config)# class-map class_map_name 
    asa(config-cmap)# match {access-list | any} 

    Step 5 Set the policy of IPS.

    asa(config-cmap)# policy-map policy_map_name 

    Step 6 Identify the plan of the class from step 5 to which you want to assign an action.

    asa(config-pmap)# class class_map_name 

    Step 7 Assign traffic to the AIP SSM.

    asa(config-pmap-c)# ips {inline | promiscuous} {fail-close | fail-open} 

    Step 8 A strategy of service IPS.

    asa(config-pmap-c)# service-policy policymap_name [global | interface interface_name] 

    Step 9 Check the settings.

  • Why do the downtime when you apply a patch using opatch?

    Hello Experts,

    Version: 11.2.0.3

    Platform: OEL 5.5

    I would like to know why we need downtime when you apply a patch to a single instance using opatch database? Is it because the binaries get relinked after the patch?

    Thank you

    Satya

    2750208 wrote:

    Hello Experts,

    Version: 11.2.0.3

    Platform: OEL 5.5

    I would like to know why we need downtime when you apply a patch to a single instance using opatch database? Is it because the binaries get relinked after the patch?

    Thank you

    Satya

    Yes, most patches require a restoring links and who will be demanding the oracle process to stop.

    Aman...

  • Fault tolerance allows to recover from the disaster without... possible downtime?

    Hi, I have two different places the same data centers in my company and I intend to make them reduntant and high available, without downtime in case of failure. I considered buying a SRM license, but I discovered that in case of failure, you will need to manually start a recovery data center recovery plan, and until that happens all virtual machines are down. So I think that if it is possible to configure 2 groups of data storage in the same virtual data center, each group in different physical locations, select FT for all the virtual machines, and then store virtual machines in the first group of data store and store the secondary instances on the second group of data store , so in case of failure of the main data center physical FT stars secondary instances that are in the secondary physical datacenter. Is - this viable?

    Yes, Dell only the HDS, Bay of storage is officially supported. You can go to the VMware hardware compatibility list, select the category of storage/SAN and Array Test Configuration, select iSCSI or FC storage clustered Metro to see the bays supported.

    However, even if you had a compatible table vMSC it would be a few other prerequisites. Metro Storage Clusters rely on replication synchronous table to avoid failure in the event of a failure of table. This obviously means that redundant low-latency dark fibre would be required between the sites. Which adds to the cost a bit.

  • The upgrade of database 10g to 11g with minimal downtime?

    Hi all

    We want to improve our 10.2.0.4 RAC database for 11.2.0.3 linux linux RAC. We have two different servers, where one is the production server (10.2.0.4) and another is the 11.2.0.3 Server.

    Here, we want to minimize downtime of the production database.

    Our db size is close to 1 TB. If we turn to the traditional method of upgradation as given below, then it will take nearly 15 hours:

    1. take RMAN 10 g bkp.

    2. transfer to server 11 g.

    3. restore the db.

    4. set at the database level.

    I had two methods to minimize the downtime that arise as follows, but I'm not sure that these means are feasible or not...

    1st method:

    Our server of db source here is 10.2.0.4 and target db server is 11.2.0.3.

    1. create a DR on the target server. (10.2.0.4)

    -Here we have installed the software (stand-alone) db to 10.2.0.4 on the target server, but also some 11.2.0.3 rac linux.

    -All data of Dr. files will be filesystem (not on ASM).

    Synchronize the database of production with the Dominican Republic.

    2. break the DR and turn it on.

    3 close the db and move the datafiles of the DR to ASM storage (11.2.0.3)

    4. start PB with option upgrade and update.

    It will take nearly 5 hours.

    2nd method:

    -Install the software grid 11g and 10g and 11 g db Server db software target.

    -We set up DR as first method but the grid HERE home will be 11 g and db House will be 10 g.

    -Now we will synchronize the DR with data base of production.

    -to activate the 10g database (target server)

    -will restart the database 11g House and then we will modernize it.

    Here I want to know that is it possible to create a DR with the following configuration?

    Production DB is 10.2.0.4 and DR is configured with 11g grid and g 10 db House.

    Kindly give your entries...

    Kind regards

    Andy...!

    Hi Srini,

    Thanks for the reply.

    I have the following document for the upgradation to 11g with minimal downtime, and it seems good. We make this POC...

    Upgrade to transitional assistance rolling logical Standby database: Oracle DataGuard 11g.

    Thank you all for your suggestions.

    Kind regards

    Andy...!

  • Need help: migration between vcenter: minimize downtime.

    Hi all

    I have 2 different vcenter installed on different site (1 United States and Maldova.) I have a few R & D vms in Maldova I have to back to the American client.

    Now, I want them to move with it drive us U.S..

    Please tell me the best way to migrate virtual machines. Also the downtime should not far enough.

    Advance thanks.in

    Hi vijay,.

    Welcome to the community...

    (1) the best way to migrate VMS is via v2v converter. You can easily migrate them in minimizing downtime.

    The disk will also be migrate according to your requirement.

    Thank you.

    Solène

  • Can clone us VM on the data centers with downtime, is this possible in ESXi 5 and above?

    Can clone us VM on the data centers with downtime, is this possible in ESXi 5 and above?

    No, they can be in different subnets.

  • Changing the settings of Cluster SWAP without the virtual machine downtime

    Hi all

    My question refers to the vSphere 5.0 version.

    I need to change the settings of my VMware Cluster swap file.

    It is set to "store the swap file in the data specified by the host store.

    I want to change it to "store the file in the same directory as the virtual machine.

    Can I do this without the VM downtime?

    Kind regards

    Martin

    You can change the setting in the cluster without affecting your running virtual machines, but virtual machines will not use this new setting until they have been rolled power.

  • Downtime planned at the end of the alert window

    We just started to use the "Time out on demand" feature of EA HQ (4.1.2 build #1053) and while everything works as expected on the planning of the systems down (alerts and other are disabled), we have a bit of a problem at the end of the window.  It seems that if leave us the end of the calendar window or clear plan, all alerts on the fire of monitored servers.  It seems to take anywhere between 10 and 15 minutes for the mental health back and for systems to return all green.

    We are scheduling maintenance is an application to all of our servers tomcat deployment in a cluster.  The alarm that fires comes from a status page of the private system, we check every five minutes in order to ensure the happiness of the app/VM.  We are in fact does not affect the hyperic agent, so it is not really a failure he or any change in itself.

    When get out us the planned downtime, they all fire immediately their alerts, and some systems claim to take up to 15 minutes to get out of the alert, despite the agents themselves never be disconnected during shutdown.  Additional weirdness, when alerts are displayed in the center of the table edge and alert, they are an hour late system (unfortunately, I don't have a snapshot of the browser with the time system down and fresh alerts at the top, but it certainly happens).

    Any thoughts on what could happen here and how we can avoid getting 20 pager alerts?

    ; MN P

    Some internal bugs have been recorded for this specific question.  Both have been resolved in HQ 4.2

  • migrate to esxi free host in the cluster paid with minimal downtime

    Please excuse my ignorance, I am very new to VMware and I am familiar with the concepts of other virtualization software, I used, but not some of the termininology, and maybe that's why my research are not turning to the top of what I need.

    We had been using the free esxi hypervisor based to host some server hosts.  These servers are running a copy of our database and are used for reporting applications.  They are also setup with files VMDK provisioned very large and thick (> 300 GB!).  They were spread great for a year now.  However, we just bought the VMWare "vSphere 4 Essentials Plus" kit for the creation of a cluster of 3 machine, with a few redunancy and other features we wanted.  We also have a new san to go with it.  We are very pleased with the product and move to her!

    On the other invited VM running on this host, (and several other hosts, its amazing to see how they arise) I stop the virtual machine and the vCenter Converter allows you to migrate the virtual computer to the new cluster.  At the same time, I would like to convert it to the thickness of a provisioning. However, because these clients have very, very big thickness provisioned HD, its research as they would take five hours or more to migrate. (other VM moved to essentially 1 GB/min)  These report servers can go without updates the master DB for several hours, but servers should always be available. I can't have them down for 5 hours. There are a lot of historical reports are refreshed by the end users.

    Is it possible for me to do what follows somehow? I can't understand:

    • disable the DB update
    • closing comments, take a quick snapshot and then launch the guest.
    • While his copy running (and not updated) main and VMDK files file to the cluster (therefore only changes to files in the snapshot file)
    • on the new cluster, once copied (or during the copy) convert the VMDK to a thin provisioned (given that only about 85 GB of data is used in fact to this topic).
    • Finally, bring up new comments on the cluster at the same time I get comments on the old host (and ignore the changes that have taken place on the snapshot file, since its mainly a readonly report server)? and re - activate the DB update.

    For end users who would be about 5 minutes total of downtime (basically, two reboots) which would be much easier to deal with than the 5 hours (each!) of how we are past other virtual machines would.

    If the stand-alone host has the same type of CPU and family, you will be able to add it to the cluster otherwise just add to vCenter. You will always have access to other features.

  • Senza Abilitare CVS downtime

    In azienda abbiamo UN host di cluster 5, currently formato da

    -1 Center Server esxi 4.0

    esx 4.0 host-2

    -esxi 4.1u1 host 2

    Questo pole sono stati aggiunti recently gli ultimi due Server con nuova san ed adesso having più ability computazionali can work without downtime by bear tutti gli host at the same level, pero it no problema e.

    Nell' esxi 4.0 host gira it vcenter e unfortunately it processore e uno Xeon 54xx, mentre quello di UN 55xx likelihood, primo it quindi non ha istruzioni SSE4.1 ed in più knew what ' host gira anche del vCenter 4.1 vm!

    Quindi pensato di abilitare VCA sul cluster having, my da some parte ho letto che è downtime, altre so Può fare senza unavailability tramite a temporary ad-hoc creato cluster...

    Schweizer reali e/o consigli?

    Grazie!

    Esatto, he becomes poi devinitivo quando you spostato tutti gli host in the cluster.

    Perderesti eventual allarmi / other / base di VUM is sono state applicate a level di cluster... di choices ed eventual impostazioni HA / DRS.

    Quindi prima di clear it cluster vuoto verification is that e few Parâmetro / configurazione particularly.

    Andrea

  • BECAUSE a node: downtime after HW-power outage?

    Hello
    A CCR node seems to be a good alternative to a "regular" CARS
    Since we have no experience with a CCR node we are currently available literature and try to get a picture of the advantages/disadvantages.
    An important point is the question "what exactly happens when a HW failure or outage occurs? It is my understanding - and what Oracle has documented - providing the Oracle Clusterware failover protection for Oracle RAC one node. If the node fails, Oracle Clusterware automatically detect the failure and restart the Oracle RAC database a node on another server in the pool.
    In our case, we would have the active node in Datacenter 1, the passive node in the data center 2. So if the node in Datacenter 1 fails, the database should start on node 2 data center.

    Now my questions are:
    -who really automatically will be?
    -What happens to the sessions that have been connected to the database before the HW failure?
    -is it possible to determine how long will take this failover?

    I'm sure someone has already tested this situation - any help will be appreciated.

    Rgds
    JH

    Published by: VivaLaVida on 05.12.2012 08:57

    Hello

    Now my questions are:
    -who really automatically will be?

    Yes, automatic and transparent

    -What happens to the sessions that have been connected to the database before the HW failure?

    Depends on if you use emotive connection will be redirected to another node, if you have cold failover, the client will be a short downtime.

    -is it possible to determine how long will take this failover?

    Dependent failure, but normal (could failover) is on range from 1 to 3 minutes, using (emotive - Hot failover) without interruption.

    Read:

    http://www.Oracle.com/technetwork/products/Clustering/overview/UG-raconenode-2009-130760.PDF?ssSourceSiteId=otncn

    Maybe this can clarify your questions.

    Ask any question.

    Kind regards
    Levi Pereira

    Published by: Levi Pereira on December 5, 2012 11:58

    PS: Ignore use of emotive if you have 'downtime after HW-break. " Consider only cold failover.

  • Add hosts to new cluster HA - downtime?

    Running two ESX hosts v4 - update1. All VM lived on DAS until recently. Implemented ISCSi SAN and reinstalled all VM shared LUN.

    Verified that both hosts have access to the same Lun, same config network and DNS seems to work fine.

    Create a cluster HA with VM followed active and I'm ready to add my two hosts.

    Can I add my hosts to the HA cluster whithout incur no downtime safely? Installing the agent HA requires a reboot?

    Thank you.

    same answer applies. Adding a new host in a cluster CVS can be done online.

  • Web Service error on downtime

    We develop Web services applications.
    Someone after items, please tell us.

    (1) if, Web services, Oracle CRM On Demand to connect downtime if the error?

    (2) if, Web services and data to add to the capacity is exceeded, an error?

    (1) and (2), we are some mistakes and I want to know if there is an error message.
    We take care of these errors.

    Thank you.

    1. If web services are stopped or OnDemand is off service->, you cannot connect and you will not get the jsession id. Most likely reason will be Server not available.

    2 capacity is exceeded-> certainly you will get the error message, I don't know exactly what message you will get.

Maybe you are looking for

  • New HP PAvilion DV7 temperature reach 70 degrees

    Hi guys,. Need help. I just bought my HP Pavilion Dv7 last Saturday. When I bought the shop, I've checked everything. and it seems ok. When I come home, I noticed very hot temperature and fan noise sound like it accelerates. then I installed temperat

  • Enter the password administrator or power on password hp pavilion dv4-217

    Hey my computer hp laptop pavilion dv4-217 showing me a blue screen with enter password administrator or power on password Deactivation of the system 67928329

  • Can I install windows 8 in hp compaq nc6400

    can I install windows8 in hp compaq nc6400RAM - 1 GBdisk hard - 80 GBprocessor-Intel Core 2 Duo T5600

  • HP LaserJet Pro MFP M125-M126: cannot set the default printer

    Hello We have HP LaserJet Pro M125 - M126 PCLmS network MFP all in one printer, as the installation of all users was a success and was working fine the day of installation, after a day all users face the question cannot set default pritner, cannot pr

  • Pause display

    I'm looking at a machine that froze on a user.  It seems fine now, but the connection, a form blinks behind the Nod32 antivirus splash screen.  How freeze or pause just the image of the screen long enough to read this form?  I thought that he used to