topic High-Availability Multi-Domain Server Pair - Patching Order? in Firewall and Security Management

High-Availability Multi-Domain Server Pair - Patching Order?

StackCap43382 — Fri, 16 Jan 2026 17:52:12 GMT

Hi All,

I need to patch an HA MDS deployment that is on a old JHF.

When upgrading you normally do so in the order; Primary > Secondary > Log Servers

What is the recommended procedure for JHF installation?

I cant see any specific documentation that makes a formal recommendation.

Thanks

PhoneBoy — Fri, 16 Jan 2026 19:26:19 GMT

Absent any specific guidance in the JHF release notes, that seems to be the most reasonable approach.

Bob_Zimmerman — Fri, 16 Jan 2026 20:01:15 GMT

I normally do the same order I use when upgrading:

Primary MDS.
Secondary MDS and an MLM at the same time. Also SmartEvent if it's deployed in the environment.
Remaining MLMs one at a time.

the_rock — Sat, 17 Jan 2026 13:50:53 GMT

That makes sense. I actually remember TAC telling the same to a customer recently.