When you have a VSX cluster, you could simply create a new cluster with both members already in but not yet SIC'ed. Now do a clean install on 1 of the 2 boxes, your other box is still handling all traffic, configure interfaces and routing, establish SIC to the newly installed box and now you are ready to install the new policy to it.
Personally I would use the Switch port move method to switch to the other box. What I mean by that is that you disable all ports (except Mgmt) when you take it out of production to be reinstalled, then when reday to move the data to the newly installed unit, you disable all switchports on the VSX box and enable the ports on the other box.
This way you can easily fail back and you have the shortest downtime. On top of that you will have a clean new installation.
To remove the VSX cluster, the VS's and the VSwitch you need to be very aware of what you do. To enable the deletion of VSX objects when the VSX hardware is gone, you need to issue a few debug commands on your management server:
fw debug fwm on TDERROR_ALL_VSXM_DBG_SKIP_PING=INFO
fw debug fwm on TDERROR_ALL_VSXM_DBG_SKIP_INSTALL=INFO
fw debug fwm on TDERROR_ALL_VSXM_DBG_SKIP_PULL_SIC=INFO
- Remove all VSX objects in SmartConsole and then issue:
fw debug fwm off
One very important thing: during the process, before deleting any object, make sure it not used anymore (installation targets) AND you Publish, Publish and Publish!!!
Regards, Maarten