ASA 5540 Firewall

Unanswered Question
Nov 24th, 2008

Does the 5540 without the AIP-SSM module have a Fail-Close option?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Sw33tpea1 Mon, 11/24/2008 - 11:32

Arul, thanks, but, this still refers to the AIP SSM Module. I do not have one in my system. Does this still applies?

ajagadee Mon, 11/24/2008 - 11:59


One of these days, I need to get my glasses :-)

My understanding is, the above commands apply only if you have a SSM in the chassis. The reason being, you don't want the ASA to drop traffic if the SSM Fails.

But, if you are doing IPS on the ASA itself, meaning no SSM, I dont think you have an option of fail close.




This Discussion