When you say gone down? do you actually mean unable to provide service to users? We have one SAN but it has 2 x controllers 2 x PSU and spare disks waiting for failure at which point they would kick in. With regards to upgrades we always do them during breaks so failure would not interrupt service. If your SAN has failed completely i would defo be looking at how resiliency failed.