Upgrading FirePass HA pair

Hi all,

 

 

Apologies if this isn't the correct forum/group for this question. I'm a bit confused which one to use for FirePass questions.

 

 

We have an HA pair of FirePass 4300's and I'd like to be able to upgrade the firmware without causing an outage for our users. The current method I follow (which does cause an outage, although brief) is:

 

 

-Must upgrade active controller first.

 

-Lock out all new users.

 

-Disconnect all existing users.

 

-Apply firmware.

 

-Repeat on other controller (which is now active because the first one has rebooted).

 

-Remove user lock out.

 

 

Is there a different method I should use? Or should we have the pair configured differently?

 

 

Thanks