Patching One HA fully then the next.

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Patching One HA fully then the next.

L4 Transporter

If patching a HA pair to the next Major version i.e. 9.0.6 -> 9.1.0  is it safe to patch one of the pair all the way to 9.1.0 (minor versions and major versions) 


And then fail over and do the other firewall to bring that up to latest minor and finally on to the major version.


Or should both firewalls be running the same latest minor version before updating the Major. 


And I guess the same question when doing the software vesion, should both be at the very last version of Major/Minor before moving one to the next software?







Cyber Elite
Cyber Elite


As long as it's a single major version difference, I've never had an issue upgrading one box fully to the target maintenance release in the next major release and then doing the other box once I've failed over traffic. That's standard operating procedure when I'm doing major release updates. 

L4 Transporter


  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!