Monitor the Upgrade Process

You can view the progress of your single device by selecting that device on the Inventory page and clicking the upgrade button. Cisco Defense Orchestrator takes you to the Device Upgrade page for that device.

During the upgrade, the system suspends HA while updating system libraries, which includes an automatic deployment, and may not be in a healthy state for the entirety of the upgrade process. This is expected. The device is available for SSH connections during the last part of this process, so if you log in shortly after applying an upgrade, you might see HA in suspended status. If the system experiences issues during the upgrade process and the HA pair appears to be suspended, manually resume HA from the Firewall device manager console of the active device.

Note

If the upgrade fails at any point, CDO displays a message. CDO does not automatically restart the upgrade process.

Warning

Upgrading devices that have self-signed certificates may experience issues; see New Certificate Detected for more information.