Filter
Top Products
70-20
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 70 Using Image Manager
About Image Updates on Devices Using Image Manager
• Via the new master, the old master is reloaded with the new image.
This procedure for image update followed by Image Manager ensures minimal switchovers and minimal
disruption of traffic.
Device State Changes During and After Image Update
Image upgrade is a critical operation and hence there is a need to depict visually, and inform users of,
all image update operations. Thus, three new device states have been introduced:
• Upgrade In Progress—The device is put into this state whenever an image install job starts on the
device. This state is automatically reset by the system after the image update operation is completed
on the device.
• Maintenance—The device is put into Maintenance state when the image install job fails on the
device and the device becomes unreachable after the image install operation. You need to manually
reset this state to normal/operational state after taking necessary steps to bring back the device
online by manually correcting issues due to upgrade or by rolling back the image.
• Configuration Required—For certain cases of image upgrade (like from ASA 8.2 to ASA 8.3),
there are significant changes in the device configuration as part of the image upgrade which renders
the policy configuration model in Security Manager incompatible with the device configuration. In
such cases, even if the image upgrade operation may be successful, you must perform some
operations, like rediscovery of device, to ensure that after upgrade, Security Manager’s
configuration policy model and the device configuration are in tandem. Thus, after an image
upgrade, if some additional configuration is required to be made in Configuration Manager to make
the device operational, the device is put into Configuration Required state. Even in the case where
VPN images are deployed using Image Manager, the device is put into Configuration Required state
since this requires the user to configure these images in the VPN policies using Configuration
Manager. The Configuration Required state indicates that there are changes to be done in
Configuration Manager to make the device functional in Security Manager after the image update
operation. You can make the suggested changes and, after you are satisfied with your configuration
changes, you can manually bring the device back to Operational state.
Note Refer to the Troubleshooting Image Management, page 70-35 for more scenarios that can
put the device in the Configuration Required mode.
Whenever the device state is changed to any of these three states, the state is indicated in the device
selector with an explicit icon. This change in device state can be seen in both Configuration Manager
and Image Manager. The normal state of the device when there is no image update operation on the
device is the Operational state.
Tip To manually reset the device state to normal or Operational status, select the device(s) in the device
selector in Configuration Manager or Image Manager, right click, and select Make Device Operational.
This section contains the following topics:
• Validating a Proposed Image Update on a Device, page 70-21
• Using the Image Installation Wizard to Install Images on Devices, page 70-24
• Install Bundled Images on Devices, page 70-28
• Install Compatible Images on Devices, page 70-28
• Install Images on Selected Devices, page 70-29