HA with Cisco ASA + Aip-Ssm

Unanswered Question
Jun 25th, 2009


I have 2 units of Cisco ASA5520 and 2 units Aip-SSM20 module. Each slotted in the ASA firewall.

I would like to run the 2 ASA on HA - Active Standby.

My question is:- does the IPS works in Active stand by too, as what the ASA is doing?

As in:- if primary ASA+IPS(module) fails, secondary ASA+IPS(module) picks up traffic.

PLease advise

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Thu, 06/25/2009 - 06:00

Since there is no traffic flowing through the Standby device, there is no traffic going through the IDS. When the Active fails and the secondary takes over, traffic will then flow through the Secondary device IPS.

Does that answer your question?


This Discussion