IPS HA with Active/Standby ASA that have the SSM-20 moduals

Unanswered Question
abinjola Tue, 02/12/2008 - 08:49
User Badges:
  • Cisco Employee,

Both Primary and Standby needs to have SSM module configured exactly the same way


When Failover occurs in primary the standby takes over and the SSM module in the standby starts processing the data as per failopen/failclose

Thanks yo uso much for your relpy. So does configurations on one SMM get replicated to the other SMM over the HA link? Also if a connection is in state and a failover occures does the IPS know about the state? I guess my question is does the coneection state from an IPS perspective get replicated to the standy IPS like connection states in the FW does?

Actions

This Discussion