Persistance Mirroring while upgrading from 10.2 to 11.3?

Hi Mubasher,

 

as far as I understand, connection mirroring is supported only between device group members using exactly the same software version.

 

Connection mirroring is a complex thing as it is replicating connection details and even payload during all stages of a connection (setup, exchange, close). The protocol has been changed during the evolution of TMOS a couple of times. And so probably does the internal connection handling.

 

For these reasons I would never recommend to leave mirroring turned on during a migration nor to rely on it. Please also keep in mind, that SSL session keys are not beeing mirrored between peers. Another aspect is the need of buffering the mirroring data on the active unit, while the standby is offline. This may consume a huge amount of resources.

 

Thanks, Stephan