02-12-2008 08:44 AM - edited 03-11-2019 05:01 AM
How does the ASA handel the IPS when a failure occures with an ASAs that are in an Active/Standby state.
02-12-2008 08:49 AM
Both Primary and Standby needs to have SSM module configured exactly the same way
When Failover occurs in primary the standby takes over and the SSM module in the standby starts processing the data as per failopen/failclose
02-12-2008 08:55 AM
Thanks yo uso much for your relpy. So does configurations on one SMM get replicated to the other SMM over the HA link? Also if a connection is in state and a failover occures does the IPS know about the state? I guess my question is does the coneection state from an IPS perspective get replicated to the standy IPS like connection states in the FW does?
02-12-2008 09:18 AM
NO..configs are not replicated...CSCsb61072 has been filed
NO..the conn/state entries of SSM are not replicated
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html#wp1051178
Hope it answered all !
02-12-2008 09:22 AM
Yes your awsome. Thanks so much!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: