Upgrade the VM-Series Model in an HA Pair

Upgrade the capacity license on the passive firewall.
Follow the procedure to Upgrade the VM-Series Model.
The new VM-Series model displays on the dashboard after some processes restart on this passive peer. This upgraded peer is now is a non-functional state because of the capacity mismatch with its active peer.
If you have enabled session synchronization, verify that sessions are synchronized across HA peers before you continue to the next step. To verify session synchronization, run the
show high-availability interface ha2
command and make sure that the Hardware Interface counters on the CPU table are increasing as follows:
In an active/passive configuration, only the active peer show packets transmitted and the passive device will only show packets received.
If you have enabled HA2 keep-alive, the hardware interface counters on the passive peer will show both transmit and receive packets. This occurs because HA2 keep-alive is bidirectional which means that both peers transmit HA2 keep-alive packets.
In an active/active configuration, you will see packets received and packets transmitted on both peers.
Upgrade the capacity license on the active firewall.
Follow the procedure to Upgrade the VM-Series Model.
The new VM-Series model displays on the dashboard after the critical processes restart. The passive firewall becomes active, and this peer (previously active firewall) moves from the initial state to becoming the passive peer in the HA pair.