IPS 4260 failover

Answered Question
Oct 26th, 2009

Do they support active passive failover. And can you just use one sensor and set it to fail open?

I have this problem too.
0 votes
Correct Answer by rhermes about 7 years 1 month ago

The is no statefull failover for the Cisco IPS Sensors. You can set the sensors to fail open, but only the 4260 has a hardware failopen capability. This means that the other sensors have to fail in such a way that they KNOW that they've failed in order to pass traffic around the sensor. In my experience this is not a reasonable assumption to make and you would be better serviced making other failopen arraingements with an eaternal switch.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
rhermes Mon, 10/26/2009 - 09:34

The is no statefull failover for the Cisco IPS Sensors. You can set the sensors to fail open, but only the 4260 has a hardware failopen capability. This means that the other sensors have to fail in such a way that they KNOW that they've failed in order to pass traffic around the sensor. In my experience this is not a reasonable assumption to make and you would be better serviced making other failopen arraingements with an eaternal switch.

Actions

This Discussion