Can I configure failover between two FWSMs running different versions of code?
A. No with FWSM1.1, and a qualified yes with FWSM2.2. FWSM1.1 Failover requires that both FWSMs run the same version of code. A mechanism within the failover feature verifies the peer version and prevents failover if the versions of code are different. For this reason, you must upgrade both FWSMs at the same time. To allow flexibility in upgrading live networks, FWSM2.2 has a feature called `online upgrade’ that allows failover between FWSM running different point releases of code (e.g. 2.2 to 2.3). Failover is still not allowed between major releases e.g. 2.x to 3.