IPS 4260 failover

Answered Question
Oct 26th, 2009

Do they support active passive failover. And can you just use one sensor and set it to fail open?

Correct Answer by rhermes about 7 years 4 months ago

The is no statefull failover for the Cisco IPS Sensors. You can set the sensors to fail open, but only the 4260 has a hardware failopen capability. This means that the other sensors have to fail in such a way that they KNOW that they've failed in order to pass traffic around the sensor. In my experience this is not a reasonable assumption to make and you would be better serviced making other failopen arraingements with an eaternal switch.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
rhermes Mon, 10/26/2009 - 09:34

The is no statefull failover for the Cisco IPS Sensors. You can set the sensors to fail open, but only the 4260 has a hardware failopen capability. This means that the other sensors have to fail in such a way that they KNOW that they've failed in order to pass traffic around the sensor. In my experience this is not a reasonable assumption to make and you would be better serviced making other failopen arraingements with an eaternal switch.

Actions

This Discussion